CVE-2023-31188
High
Description
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505', Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506', and Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616'.
SeverityHigh
CVSS8.0
Exploit probability—
Product
Tp-link Archer C55 Firmware
PublishedSep 6, 2023
First seenSep 6, 2023
Weakness typeCWE-78OS command injection
How to fix
Update
- tp-link archer_c55_firmware230506 or later
- tp-link archer_c50_v3_firmware230505 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tp-link archer_c55_firmware | v < 230506 | 230506 |
| tp-link archer_c50_v3_firmware | v < 230505 | 230505 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.