Login Request a demo
Medium severity · published Feb 21, 2023
CVE-2023-0936
TP-Link Archer C50 Web Management Interface denial of service
6.5
CVSS
0.9%
EPSS
No
On KEV
Description
A vulnerability was found in TP-Link Archer C50 V2_160801. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation leads to denial of service. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221552.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Archer C50 · TP-Link
V2_160801 · source: vendor, NVD
Affected product
AC
Archer C50
TP-Link
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-0936
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-0936
Permissions Required
https://vuldb.com/?ctiid.221552
Exploit
https://vuldb.com/?id.221552
More from Archer C50
8.8
CVE-2023-32619
Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' use hard-coded credentials to login to the…
8.0
CVE-2023-31188
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands
7.5
CVE-2023-30383
TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer…
7.5
CVE-2020-9375
TP-Link Archer C50 V3 devices before Build 200318 Rel