TP-Link Archer c1200 Firmware vulnerabilities

5 CVEs affecting TP-Link Archer c1200 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-38563, published 2023-09-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-13614, published 2019-07-17. Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days. CMD_SET_CONFIG_COUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and earlier is prone to a stack-based buffer overflow, which allows a remote…
CVE-2019-13613, published 2019-07-17. Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days. CMD_FTEST_CONFIG in the TP-Link Device Debug protocol in TP-Link Wireless Router Archer Router version 1.0.0 Build 20180502 rel.45702 (EU) and earlier is prone to a stack-based buffer overflow, which…
CVE-2018-13134, published 2018-07-04. Medium severity, CVSS 6.1. EPSS: 2.3% chance of exploitation in the next 30 days. TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATH_INFO to the /webpages/data URI.
CVE-2020-17891, published 2021-05-14. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. TP-Link Archer C1200 firmware version 1.13 Build 2018/01/24 rel.52299 EU has a XSS vulnerability allowing a remote attacker to execute arbitrary code.
CVE-2023-38563, published 2023-09-06. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Archer C1200 firmware versions prior to 'Archer C1200(JP)_V2_230508' and Archer C9 firmware versions prior to 'Archer C9(JP)_V3_230508' allow a network-adjacent unauthenticated attacker to execute…