Cleartext HTTP Vulnerability in TP-Link Archer C5v Management Interface
CVE-2021-27209

7.1HIGH

Key Information:

Vendor
Tp-link
Status
Archer C5v Firmware
Vendor
CVE Published:
13 February 2021

Summary

The management interface of the TP-Link Archer C5v 1.7_181221 device is vulnerable due to the transmission of user credentials in base64 format over cleartext HTTP. This lack of proper encryption puts sensitive user information at risk, as it can be intercepted during transmission by potential attackers. It is crucial for users of affected devices to secure their networks and apply necessary updates to ensure data confidentiality.

References

https://gokay.org/tp-link-archer-c5v-base64-cookie/
x_refsource_MISC

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.