Remote Code Execution Vulnerability in TP-Link Archer A7 Router

CVE-2020-10884

Summary

This vulnerability in TP-Link Archer A7 routers enables network-adjacent attackers to execute arbitrary code without authentication. The issue arises from a flaw in the tdpServer service that listens on UDP port 20002, compounded by the use of a hard-coded encryption key. Attackers can exploit this vulnerability alongside others to gain root access, posing serious risks to affected installations. For further details, refer to the Zero-Day Initiative and Packet Storm Security advisories.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2020-10884
Created by Rapid7

References