Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:archer_c20_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductArcher C20 Firmware (73c57d16-f3c5-547b-985b-ca7a4d983274)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15551 vulnerable 2026-06-08 07:06:36.442579 LAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N
The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router's admin web portal without the user's permission or knowledge.
Published: 2026-02-05T17:22:55.600Z
Updated: 2026-04-22T21:35:19.737Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37284 vulnerable 2026-06-08 06:08:15.077280 Details available
Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication.
Published: 2023-09-06T09:24:42.525Z
Updated: 2024-09-26T20:41:42.264Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31188 vulnerable 2026-06-08 06:04:42.095898 Details available
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505', Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506', and Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616'.
Published: 2023-09-06T09:28:18.168Z
Updated: 2024-09-27T20:50:29.101Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.