7.8

CVE-2020-9375

Exploit
TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tp-link ≫ Archer C50 Versionbuild_170822
   Tp-link ≫ Archer C5 Versionv3
Tp-link ≫ Archer C50 Versionbuild_171227
   Tp-link ≫ Archer C5 Versionv3
Tp-link ≫ Archer C50 Versionbuild_200318
   Tp-link ≫ Archer C5 Versionv3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 28.22% 0.979
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-772 Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

http://packetstormsecurity.com/files/156928/TP-Link-Archer-C50-V3-Denial-of-Service.html
Third Party Advisory
Exploit
https://thewhiteh4t.github.io/2020/02/27/CVE-2020-9375-TP-Link-Archer-C50-v3-Denial-of-Service.html
Third Party Advisory
Exploit
https://www.tp-link.com/in/support/download/archer-c50/v3/#Firmware
Vendor Advisory
Release Notes
https://thewhiteh4t.github.io/blog/cve-2020-9375-tplink/