Approved changes feed: RSS · Atom
cpe:2.3:a:tp-link:archer_c5:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e) |
|---|---|
| Product | Archer C5 (02256bc4-c781-5dd4-ac28-894e31116738) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-39224 |
vulnerable | 2026-06-08 06:09:36.058321 |
Details available
Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7(JP)_V2_230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided.
Published: 2023-09-06T09:22:59.282Z
Updated: 2024-09-26T20:13:06.770Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4499 |
vulnerable | 2026-06-08 05:51:59.635430 |
The strcmp function in TP-Link routers, Archer C5 and WR710N-V1, used for checking credentials in httpd, is susceptible to a side-channel attack.
TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is susceptible to a side-channel attack. By measuring the response time of the httpd process, an attacker could guess each byte of the username and password.
Published: 2023-01-11T18:48:41.778Z
Updated: 2025-11-04T19:14:15.425Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4498 |
vulnerable | 2026-06-08 05:51:59.631117 |
A vulnerable HTTP Basic Authentication process in TP-Link routers, Archer C5 and WR710N-V1, is susceptible to either a DoS or an arbitrary code execution via any interface.
In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS (by crashing the httpd process) or an arbitrary code execution.
Published: 2023-01-11T20:38:37.312Z
Updated: 2025-11-04T19:14:14.345Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.