Riskcovery

CVE-2023-32619

State
Published
Severity
8.8 High
Published
Sep 6, 2023
Updated
Sep 26, 2024
Reserved
Aug 15, 2023

Read the record on cve.org

Description

Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

  • CWE-798 Use of Hard-coded Credentials

Affected Products

ProductVersions
Archer C50TP-LINK
  • firmware versions prior to 'Archer C50(JP)_V3_230505'Affected
Archer C55TP-LINK
  • firmware versions prior to 'Archer C55(JP)_V1_230506'Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.