Remote Code Execution in TP-Link Archer A7 Firmware

CVE-2020-10882

Summary

A vulnerability in the TP-Link Archer A7 router allows network-adjacent attackers to execute arbitrary code without authentication. The flaw is found in the tdpServer service, which listens on UDP port 20002. When the service processes the slave_mac parameter, it fails to properly validate user input before executing a system call, leading to serious security risks. Attackers can exploit this issue to gain root access and potentially compromise the affected system.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2020-10882
Created by Rapid7

CVE-2020-10882
Created by lnversed

References