UNIX Symbolic Link Vulnerability in TP-Link Archer A7 Router
CVE-2020-5795

6.2MEDIUM

Key Information:

Vendor
Tp-link
Status
Tp-link Archer A7 V5
Vendor
CVE Published:
6 November 2020

Summary

A vulnerability in the TP-Link Archer A7 router permits an authenticated admin user with physical and network access to execute arbitrary code. This occurs when a crafted USB drive is plugged into the device, exploiting the symlink functionality inherent in UNIX-like systems. The risk emphasizes the importance of securing physical access to network devices to mitigate potential security breaches.

Affected Version(s)

TP-Link Archer A7 v5 Firmware Archer A7(US)_V5_200721

References

https://www.tenable.com/security/research/tra-2020-60
x_refsource_MISC

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.