CVE-2020-5795: TP-Link Archer a7 Firmware

Medium severity, CVSS 6.2. EPSS: 1.1% chance of exploitation in the next 30 days.

UNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router.

Affected products

• TP-Link Archer a7 Firmware: version 200721 only

Published 2020-11-06. Last modified 2026-06-17.