Approved changes feed: RSS · Atom

cpe:2.3:a:tp-link_systems_inc.:archer_c7_v5_and_v5.8:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTp Link Systems Inc. (48bb0273-54d9-5a12-8b5a-2521b7aba122)
ProductArcher C7 V5 And V5.8 (e200b568-b0ec-59ac-90c0-bee01ddbe92b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5363 vulnerable 2026-06-08 08:07:03.619106 Use of weak cryptographic key in TP-Link Archer C7
Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modules) allows Password Recovery Exploitation. The web interface encrypts the admin password client-side using RSA-1024 before sending it to the router during login.  An adjacent attacker with the ability to intercept network traffic could potentially perform a brute-force or factorization attack against the 1024-bit RSA key to recover the plaintext administrator password, leading to unauthorized access and compromise of the device configuration.  This issue affects Archer C7: through Build 20220715.
Published: 2026-04-15T23:45:54.271Z
Updated: 2026-04-16T23:10:46.170Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.