CVE-2020-5797
MEDIUM6.1CVSS v3
3.6CVSS v2
0.20%
EPSS (exploit probability)
CWE-59CWE
Description
UNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)_V1_180125 firmware allows an unauthenticated actor, with physical access and network access, to read sensitive files and write to a limited set of files after plugging a crafted USB drive into the router.
CVSS v3 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected routers (1)
| Vendor | Model | Matched via | Affected versions | Fixed in | Patch? |
|---|---|---|---|---|---|
| TP-Link | TP-Link Archer C9 | — |
— | — | No |