Description (CNA)
Use of Hard-coded Credentials in TP-Link Archer C50 V3( <= 180703)/V4( <= 250117 )/V5( <= 200407 ), and C20 V5 (<US_V5_260419 or <EU_V5_260317) allows attackers to decrypt the config.xml files.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TP-Link Systems Inc. / Archer C50 V3 | affected 0 through 180703 |
| TP-Link Systems Inc. / Archer C50 V4 | affected 0 through 250117 |
| TP-Link Systems Inc. / Archer C50 V5 | affected 0 through 200407 |
| TP-Link Systems Inc. / Archer C20 V5 | affected 0 before US_V5_260419; affected 0 before EU_V5_260317 |
CWE
CWE-798
References
- https://www.tp-link.com/us/support/faq/4538/
- https://www.tp-link.com/us/support/download/archer-c20/v5/#Firmware
- https://www.tp-link.com/en/support/download/archer-c20/v5/#Firmware
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.