CVE-2018-19537: Malicious File Upload
TP-Link Archer C5 devices through V2160201US allow remote command execution via shell metacharacters on the wandynhostname line of a configuration file that is encrypted with the 478DA50BF9E3D2CF key and uploaded through the web GUI by using the web admin account. The default password of admin may be used in some cases.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-19537?
CVE-2018-19537 is a vulnerability that allows remote command execution on TP-Link Archer C5 devices.
How severe is CVE-2018-19537?
CVE-2018-19537 has a severity rating of 7.2 (critical).
How does CVE-2018-19537 work?
CVE-2018-19537 allows remote command execution by exploiting shell metacharacters on the wan_dyn_hostname line of a configuration file.
How can I protect my TP-Link Archer C5 device from CVE-2018-19537?
To protect against CVE-2018-19537, make sure to update your TP-Link Archer C5 firmware to a version that fixes the vulnerability.
Is there a fix available for CVE-2018-19537?
Yes, TP-Link has released a firmware update that fixes the vulnerability. Make sure to update your TP-Link Archer C5 device to the latest firmware version.