Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:archer_c5_firmware:2_160201_us:*:*:*:*:*:*:*

part: o version: 2_160201_us update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductArcher C5 Firmware (e363ba25-d7e8-598b-965e-c63c868446ad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4499 vulnerable 2026-06-08 05:51:59.635532 The strcmp function in TP-Link routers, Archer C5 and WR710N-V1, used for checking credentials in httpd, is susceptible to a side-channel attack.
TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is susceptible to a side-channel attack. By measuring the response time of the httpd process, an attacker could guess each byte of the username and password.
Published: 2023-01-11T18:48:41.778Z
Updated: 2025-11-04T19:14:15.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4498 vulnerable 2026-06-08 05:51:59.631967 A vulnerable HTTP Basic Authentication process in TP-Link routers, Archer C5 and WR710N-V1, is susceptible to either a DoS or an arbitrary code execution via any interface.
In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS (by crashing the httpd process) or an arbitrary code execution.
Published: 2023-01-11T20:38:37.312Z
Updated: 2025-11-04T19:14:14.345Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.