CVE-2020-10883mediumCWE-732

CVE-2020-10883: medium-severity vulnerability in TP-Link Archer A7

Published · Updated

Follow this CVE+ Monitor Archer A7

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

48Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 5.3epss 5.3%
from disclosure to weapon22 days
Published on NVDMar 25
1st PoC+22d
metasploitMar 25
This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the file system. The issue lies in the lack of proper permissions set on the file system. An attacker can leverage this vulnerability to escalate privileges. Was ZDI-CAN-9651.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
TP-Link · Archer A7
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — TP-Link Archer A7

In the same product, most dangerous first.

CVE-2020-10882HIGHCVE-2020-10882EPSS 41.1%CVE-2020-10884HIGHCVE-2020-10884EPSS 38.8%CVE-2020-10881CRITICALCVE-2020-10881EPSS 9.3%CVE-2020-10885HIGHCVE-2020-10885EPSS 6.5%CVE-2020-10886HIGHCVE-2020-10886EPSS 5.0%CVE-2020-10888MEDIUMCVE-2020-10888EPSS 4.2%