Tp-link Archer C5 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tp-link Archer C5 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2020-35575 — CVSS 9.8 (critical): A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to…
• CVE-2022-4498 — CVSS 9.8 (critical): In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service…
• CVE-2015-3035 — CVSS 7.5 (high) — actively exploited: Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8…
• CVE-2022-4499 — CVSS 7.5 (high): TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is…
• CVE-2018-19537 — CVSS 7.2 (high): TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_hostname line of a…