Vulnerabilities > TP Link > Archer C9 Firmware

DATE CVE VULNERABILITY TITLE RISK
2023-09-06 CVE-2023-38563 OS Command Injection vulnerability in Tp-Link Archer C1200 Firmware and Archer C9 Firmware
Archer C1200 firmware versions prior to 'Archer C1200(JP)_V2_230508' and Archer C9 firmware versions prior to 'Archer C9(JP)_V3_230508' allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands.
low complexity
tp-link CWE-78
8.8
2020-11-21 CVE-2020-5797 Link Following vulnerability in Tp-Link Archer C9 Firmware 180125
UNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)_V1_180125 firmware allows an unauthenticated actor, with physical access and network access, to read sensitive files and write to a limited set of files after plugging a crafted USB drive into the router.
low complexity
tp-link CWE-59
6.1