Archer C7 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:tp-link:archer_c7_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Tp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e) |
|---|---|
| Product | Archer C7 Firmware (7fbb48d8-beb3-5801-9f46-47729c2bd8cb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9377 |
vulnerable | 2026-06-08 07:45:22.387446 |
Authenticated RCE via Parental Control command injection
The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9.
This issue affects Archer C7(EU) V2: before 241108 and TL-WR841N/ND(MS) V9: before 241108.
Both products have reached the status of EOL (end-of-life).
It's recommending to
purchase the new
product to ensure better performance and security. If replacement is not
an option in the short term, please use the second reference link to
download and install the patch(es).
Published: 2025-08-29T17:30:33.700Z
Updated: 2026-02-26T17:47:46.853Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39224 |
vulnerable | 2026-06-08 06:09:36.059514 |
Details available
Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7(JP)_V2_230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided.
Published: 2023-09-06T09:22:59.282Z
Updated: 2024-09-26T20:13:06.770Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3035 |
vulnerable | 2026-06-08 05:06:36.662044 |
Details available
Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.
Published: 2015-04-17T18:00:00.000Z
Updated: 2025-10-21T23:56:02.932Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.