High severity8.8NVD Advisory· Published Sep 6, 2023· Updated Jun 17, 2026
CVE-2023-37284
CVE-2023-37284
Description
Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:o:tp-link:archer_c20_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:archer_c20_firmware:*:*:*:*:*:*:*:*range: <230616
- (no CPE)range: < Archer C20(JP)_V1_230616
- Range: firmware versions prior to 'Archer C20(JP)_V1_230616'
Patches
Vulnerability mechanics
References
2- jvn.jp/en/vu/JVNVU99392903/nvdThird Party Advisory
- www.tp-link.com/jp/support/download/archer-c20/v1/nvdProduct
News mentions
0No linked articles in our index yet.