TP-Link Archer C50 Web Management Interface denial of service
CVE-2023-0936

6.5MEDIUM

Key Information:

Vendor
Tp-link
Status
Archer C50
Vendor
CVE Published:
21 February 2023

Badges

👾 Exploit Exists🟡 Public PoC

Summary

A vulnerability was found in TP-Link Archer C50 V2_160801. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation leads to denial of service. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221552.

Affected Version(s)

Archer C50 V2_160801

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2023-0936 - Proof of Concept

References

https://vuldb.com/?id.221552
vdb-entrytechnical-descriptionexploit
https://vuldb.com/?ctiid.221552
signature

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

CVSS V3.0

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

a2ure (VulDB User)
.