Vulnerability Details CVE-2023-37284
Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 3.8%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2023-37284
-
cpe:2.3:h:tp-link:archer_c20:1
-
cpe:2.3:o:tp-link:archer_c20_firmware:150707