High severity7.2NVD Advisory· Published Nov 26, 2018· Updated Jun 17, 2026

CVE-2018-19537

Description

TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_hostname line of a configuration file that is encrypted with the 478DA50BF9E3D2CF key and uploaded through the web GUI by using the web admin account. The default password of admin may be used in some cases.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TP-Link/Archer C5llm-fuzzy
Range: V2_160201_US

Patches

Vulnerability mechanics

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000