Approved changes feed: RSS · Atom

cpe:2.3:a:tp-link_systems_inc.:archer_c7_v5:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTp Link Systems Inc. (48bb0273-54d9-5a12-8b5a-2521b7aba122)
ProductArcher C7 V5 (38fc203c-29ef-5104-a0e3-b1f21f859e4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-18330 vulnerable 2026-11-03 10:17:40.755008 Hardcoded Shared RSA-1024 Private Key in Web Login in TP-Link RE305 and Archer C7
A hard-coded cryptographic key vulnerability exists in TP-Link RE305 V3 and Archer C7 V5. The same RSA-1024 private key is stored within firmware configuration files and reused across devices. An attacker who obtains the private key and captures an HTTP Web UI login session may use the key to decrypt the administrator password.  Successful exploitation may disclose the administrator password captured from an HTTP login session and compromise session confidentiality.
Published: 2026-09-03T22:24:45.430Z
Updated: 2026-10-27T17:39:53.630Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-102812 vulnerable 2026-11-03 10:15:43.857165 Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7
A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization vector are embedded in the firmware configuration-management component. An attacker who obtains an affected configuration backup file may extract the cryptographic material from the firmware and use it to decrypt the backup.  Successful exploitation may disclose sensitive configuration information contained in a backup file, including administrator passwords and Wi-Fi credentials.
Published: 2026-10-27T17:40:13.729Z
Updated: 2026-11-04T16:59:50.707Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.