CVE-2023-32619
High
Description
Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Tp-link Archer C55 Firmware
PublishedSep 6, 2023
First seenSep 6, 2023
Weakness typeCWE-798Hard-coded credentials
How to fix
Update
- tp-link archer_c55_firmware230506 or later
- tp-link archer_c50_v3_firmware230505 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tp-link archer_c55_firmware | v < 230506 | 230506 |
| tp-link archer_c50_v3_firmware | v < 230505 | 230505 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.