TP-Link ARCHER C90 FIRMWARE 1.0.6 Build 20200114
Approved changes feed: RSS · Atom
cpe:2.3:o:tp-link:archer_c90_firmware:1.0.6:build_20200114:*:*:*:*:*:*
part: o version: 1.0.6 update: build_20200114
| Vendor | Tp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e) |
|---|---|
| Product | Archer C90 Firmware (1074be40-c5e8-5a13-b254-2ff69ae701f6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-38563 |
vulnerable | 2026-06-08 06:08:18.351419 |
Details available
Archer C1200 firmware versions prior to 'Archer C1200(JP)_V2_230508' and Archer C9 firmware versions prior to 'Archer C9(JP)_V3_230508' allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands.
Published: 2023-09-06T09:24:08.253Z
Updated: 2024-09-26T20:09:38.552Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35003 |
vulnerable | 2026-06-08 05:32:17.385414 |
Details available
CRITICAL (9.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114 rel.73164(5553) routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-14655.
Published: 2022-01-21T15:45:14.000Z
Updated: 2024-08-04T00:26:55.941Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.