CVE-2020-5795

6.2MEDIUM

Key Information:

Vendor
Tp-link
Status
Tp-link Archer A7 V5
Vendor
CVE Published:
6 November 2020

Summary

UNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router.

Affected Version(s)

TP-Link Archer A7 v5 Firmware Archer A7(US)_V5_200721

References

https://www.tenable.com/security/research/tra-2020-60
x_refsource_MISC

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.