TP-Link Archer c50 vulnerabilities

3 CVEs affecting TP-Link Archer c50, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-0936, published 2023-02-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-9375, published 2020-03-25. High severity, CVSS 7.5. EPSS: 26.7% chance of exploitation in the next 30 days. TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field.
CVE-2020-12695, published 2020-06-08. High severity, CVSS 7.5. EPSS: 15.2% chance of exploitation in the next 30 days. The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully…
CVE-2023-0936, published 2023-02-21. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was found in TP-Link Archer C50 V2_160801. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The…