Approved changes feed: RSS · Atom

cpe:2.3:h:tp-link:archer_c7:2.0:*:*:*:*:*:*:*

part: h version: 2.0 update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductArcher C7 (54f1069f-9552-508a-bf8e-3755ee623545)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9377 not_vulnerable 2026-06-08 07:45:22.388205 Authenticated RCE via Parental Control command injection
The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9. This issue affects Archer C7(EU) V2: before 241108 and TL-WR841N/ND(MS) V9: before 241108. Both products have reached the status of EOL (end-of-life). It's recommending to purchase the new product to ensure better performance and security. If replacement is not an option in the short term, please use the second reference link to download and install the patch(es).
Published: 2025-08-29T17:30:33.700Z
Updated: 2026-02-26T17:47:46.853Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39224 not_vulnerable 2026-06-08 06:09:36.060667 Details available
Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7(JP)_V2_230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided.
Published: 2023-09-06T09:22:59.282Z
Updated: 2024-09-26T20:13:06.770Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2646 not_vulnerable 2026-06-08 06:02:42.702629 TP-Link Archer C7v2 GET Request Parameter denial of service
MEDIUM (4.5)
A vulnerability has been found in TP-Link Archer C7v2 v2_en_us_180114 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component GET Request Parameter Handler. The manipulation leads to denial of service. The attack can only be done within the local network. The associated identifier of this vulnerability is VDB-228775. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-05-11T07:31:04.076Z
Updated: 2025-01-24T16:52:19.575Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.