TP-Link Archer c50 Firmware vulnerabilities

3 CVEs affecting TP-Link Archer c50 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-54126, published 2024-12-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-33087, published 2022-06-30. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. A stack overflow in the function DM_ In fillobjbystr() of TP-Link Archer C50&A5(US)_V5_200407 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVE-2023-30383, published 2023-07-18. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer overflow which may lead…
CVE-2024-54126, published 2024-12-05. High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days. This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges…