Approved changes feed: RSS · Atom

cpe:2.3:h:tp-link:ac1750:a7:*:*:*:*:*:*:*

part: h version: a7 update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductAc1750 (26065a19-5045-58fd-a82d-52532d44d4d7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27246 not_vulnerable 2026-06-08 05:30:46.225639 Details available
HIGH (8)
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 1.0.15 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoint. A crafted TCP message can write stack pointers to the stack. An attacker can leverage this vulnerability to execute code in the context of the root user. Was ZDI-CAN-12306.
Published: 2021-04-14T15:45:53.000Z
Updated: 2024-08-03T20:48:15.729Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28347 not_vulnerable 2026-06-08 05:23:54.019269 Details available
tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slave_mac parameter. NOTE: this issue exists because of an incomplete fix for CVE-2020-10882 in which shell quotes are mishandled.
Published: 2020-11-08T20:00:39.000Z
Updated: 2024-08-04T16:33:58.999Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.