TP-Link Archer c55 Firmware vulnerabilities

2 CVEs affecting TP-Link Archer c55 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32619, published 2023-09-06.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-31188, published 2023-09-06. High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer C50 firmware versions prior to 'Archer…
• CVE-2023-32619, published 2023-09-06. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' use hard-coded credentials to login to the affected device, which…