Unrated severityNVD Advisory· Published Mar 25, 2020· Updated Aug 4, 2024
CVE-2020-10883
CVE-2020-10883
Description
This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the file system. The issue lies in the lack of proper permissions set on the file system. An attacker can leverage this vulnerability to escalate privileges. Was ZDI-CAN-9651.
Affected products
1- Range: Firmware Ver: 190726
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- packetstormsecurity.com/files/157255/TP-Link-Archer-A7-C7-Unauthenticated-LAN-Remote-Code-Execution.htmlmitrex_refsource_MISC
- www.zerodayinitiative.com/advisories/ZDI-20-335/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.