CVE-2023-2646: TP-Link Archer C7v2 GET Request Parameter denial of service
A vulnerability has been found in TP-Link Archer C7v2 v2enus180114 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component GET Request Parameter Handler. The manipulation leads to denial of service. The attack can only be done within the local network. The associated identifier of this vulnerability is VDB-228775. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability identified as CVE-2023-2646?
CVE-2023-2646 is a vulnerability found in the TP-Link Archer C7v2 router that allows an attacker to perform a denial of service attack by manipulating the GET request parameters.
How severe is the CVE-2023-2646 vulnerability?
The severity of the CVE-2023-2646 vulnerability is rated as medium with a severity value of 6.5.
Which software versions are affected by the CVE-2023-2646 vulnerability?
The TP-Link Archer C7v2 firmware version 180114 is affected by the CVE-2023-2646 vulnerability.
How can the CVE-2023-2646 vulnerability be exploited?
An attacker can exploit the CVE-2023-2646 vulnerability by performing a denial of service attack using manipulated GET request parameters within the local network.
Is the TP-Link Archer C7 router version 2.0 affected by the CVE-2023-2646 vulnerability?
No, the TP-Link Archer C7 router version 2.0 is not affected by the CVE-2023-2646 vulnerability.