Archer C20 Firmware

archer_c20_firmware

Vendor: Tp Link • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-15551 1Tp Link 4Archer C20 Firmware Archer Mr200 FirmwareTl Wr845n Firmware+1 more Jun 17, 2026 Feb 5, 2026 5.9 MEDIUM· v4 5.6 MEDIUM· v3 N/A· v2 The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit...Show more The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router's admin web portal without the user's permission or knowledge.Show less
CVE-2026-0834 1Tp Link 2Archer Ax53 Firmware Archer C20 Firmware Jun 17, 2026 Jan 21, 2026 7.2 HIGH· v4 8.8 HIGH· v3 N/A· v2 Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot w...Show more Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability. This issue affects Archer C20 v6.0 < V6_251031, Archer C20 v5 <EU_V5_260317 or < US_V5_260419 Archer AX53 v1.0 < V1_251215 TL-WR841N v13 < 0.9.1 Build 20231120 Rel.62366Show less
CVE-2024-57049 1Tp Link 1Archer C20 Firmware Jun 30, 2026 Feb 18, 2025 N/A· v4 N/A· v3 N/A· v2 Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE-2023-37284 1Tp Link 1Archer C20 Firmware Jun 17, 2026 Sep 6, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to byp...Show more Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication.Show less
CVE-2023-30383 1Tp Link 3Archer C20 Firmware Archer C2 V1 FirmwareArcher C50 Firmware Jul 9, 2026 Jul 18, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer overflow which may lead to a Denial of Service...Show more TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer overflow which may lead to a Denial of Service (DoS) when parsing crafted data.Show less