Vulnerabilities > TP Link > Archer C5

DATE CVE VULNERABILITY TITLE RISK
2018-11-26 CVE-2018-19537 Unrestricted Upload of File with Dangerous Type vulnerability in Tp-Link Archer C5 Firmware
TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_hostname line of a configuration file that is encrypted with the 478DA50BF9E3D2CF key and uploaded through the web GUI by using the web admin account.
network
low complexity
tp-link CWE-434
critical
9.0