CVE-2020-5795
First published: Fri Nov 06 2020(Updated: )
UNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router.
Credit: vulnreport@tenable.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tp-link Archer A7 Firmware | =200721 | |
| TP-Link Archer A7 | =v5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-5795.
What is the severity of CVE-2020-5795?
The severity of CVE-2020-5795 is high.
Which software is affected by CVE-2020-5795?
TP-Link Archer A7 Firmware version 200721 is affected by CVE-2020-5795.
How can an attacker exploit CVE-2020-5795?
An attacker with physical and network access can exploit CVE-2020-5795 by plugging a crafted USB drive into the router.
Is TP-Link Archer A7 v5 vulnerable to CVE-2020-5795?
No, TP-Link Archer A7 v5 is not vulnerable to CVE-2020-5795.
- collector/nvd-index
- vendor/tp-link
- canonical/tp-link archer a7 firmware
- version/tp-link archer a7 firmware/200721
- canonical/tp-link archer a7
- version/tp-link archer a7/v5