CVE-2023-32619
First published: Wed Sep 06 2023(Updated: )
Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command.
Credit: vultures@jpcert.or.jp vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tp-link Archer C55 Firmware | <230506 | |
| Tp-link Archer C55 | ||
| Tp-link Archer C50 V3 Firmware | <230505 | |
| Tp-link Archer C50 V3 | ||
| All of | ||
| Tp-link Archer C55 Firmware | <230506 | |
| Tp-link Archer C55 | ||
| All of | ||
| Tp-link Archer C50 V3 Firmware | <230505 | |
| Tp-link Archer C50 V3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-32619.
What is the severity of CVE-2023-32619?
The severity of CVE-2023-32619 is high with a CVSS score of 8.8.
Which devices are affected by CVE-2023-32619?
Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' are affected.
What is the risk of CVE-2023-32619?
CVE-2023-32619 allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command.
How can I fix CVE-2023-32619?
To fix CVE-2023-32619, update your Archer C50 firmware to 'Archer C50(JP)_V3_230505' or later, and update your Archer C55 firmware to 'Archer C55(JP)_V1_230506' or later.
- collector/nvd-index
- agent/author
- agent/type
- agent/severity
- agent/references
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/source
- vendor/tp-link
- canonical/tp-link archer c55 firmware
- canonical/tp-link archer c55
- canonical/tp-link archer c50 v3 firmware
- canonical/tp-link archer c50 v3