CVE-2021-27245: TP-Link Archer A7 Protection Mechanism Failure Firewall Bypass Vulnerability
First published: Mon Mar 29 2021(Updated: )
This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of IPv6 connections. The issue results from the lack of proper filtering of IPv6 SSH connections. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root.
Credit: zdi-disclosures@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tp-link Archer A7 Firmware | <c7\(us\)_v5_210125 | |
| TP-Link Archer A7 | ||
| Tp-link Archer A7 Firmware | <a7\(us\)_v5_200220 | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this TP-Link Archer A7 vulnerability?
The vulnerability ID for this TP-Link Archer A7 vulnerability is CVE-2021-27245.
What is the title of this vulnerability?
The title of this vulnerability is TP-Link Archer A7 Protection Mechanism Failure Firewall Bypass Vulnerability.
What is the severity of CVE-2021-27245?
The severity of CVE-2021-27245 is critical with a CVSS score of 8.1.
How does this vulnerability affect TP-Link Archer A7 routers?
This vulnerability affects TP-Link Archer A7 routers prior to Archer C7(US)_V5_210125 and Archer A7(US)_V5_200220 AC1750.
Is authentication required to exploit CVE-2021-27245?
No, authentication is not required to exploit CVE-2021-27245.
What is the specific flaw within the handling of IPv6 connections?
The specific flaw within the handling of IPv6 connections is a firewall bypass.
How can I fix this vulnerability on my TP-Link Archer A7 router?
To fix this vulnerability, update your TP-Link Archer A7 router to Archer C7(US)_V5_210125 or Archer A7(US)_V5_200220 AC1750 firmware.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/title
- agent/references
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/softwarecombine
- agent/tags
- agent/event
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-21-214
- alias/ZDI-CAN-12309
- alias/CVE-2021-27245
- agent/software-canonical-lookup
- vendor/tp-link
- canonical/tp-link archer a7 firmware
- canonical/tp-link archer a7