Archer Mr600
Approved changes feed: RSS · Atom
cpe:2.3:a:tp-link_systems_inc.:archer_mr600:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tp Link Systems Inc. (48bb0273-54d9-5a12-8b5a-2521b7aba122) |
|---|---|
| Product | Archer Mr600 (3dc3fccf-6c5b-5cec-97b2-3e2393a964d0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-76653 |
vulnerable | 2026-09-16 04:32:47.811138 |
Missing Authentication in VPN Configuration Management in TP-Link TL-MR6400 and Archer MR600
A missing
authentication vulnerability in the VPN configuration management has been
identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker
may be able to access and modify VPN configuration information without valid
credentials.
Successful
exploitation may allow a remote unauthenticated attacker to disclose and modify
VPN configuration information.
Published: 2026-09-10T20:12:43.207Z
Updated: 2026-09-10T20:27:18.091Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-76652 |
vulnerable | 2026-09-16 04:32:47.767761 |
Authenticated Directory Traversal Vulnerability in File Upload Functionality in TP-Link TL-MR6400 and Archer MR600
An
authenticated directory traversal vulnerability in file upload functionality has
been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8. Due to insufficient validation of user-supplied file
information, an authenticated remote attacker with access to the affected
upload functionality could upload a specially crafted file and cause it to be
written outside the intended directory.
Successful
exploitation could allow an authenticated remote attacker to write files to
unintended locations, potentially overwriting or modifying files
accessible to the affected service; arbitrary code execution has not
been demonstrated.
Published: 2026-09-10T20:12:50.706Z
Updated: 2026-09-10T20:27:00.302Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.