Exploitation Summary
EIP tracks 3 public exploits for CVE-2020-10882.
PoCs published by lnversed, including Metasploit module exploits/linux/misc/tplink_archer_a7_c7_lan_rce.
AI-analyzed exploit summary This repository contains only a README with reference links to external advisories and blog posts about CVE-2020-10882, which involves a vulnerability in TP-Link Archer C7 routers. No exploit code or technical details are provided in the repository itself.
Description
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on UDP port 20002 by default. When parsing the slave_mac parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the root user. Was ZDI-CAN-9650.
Exploits (3)
This repository contains only a README with reference links to external advisories and blog posts about CVE-2020-10882, which involves a vulnerability in TP-Link Archer C7 routers. No exploit code or technical details are provided in the repository itself.
This Metasploit module exploits a command injection vulnerability in the tdpServer daemon on TP-Link Archer A7/C7 routers, allowing unauthenticated remote code execution as root. It includes a checksum calculation for packet validation and supports payload delivery via HTTP.
This Metasploit module exploits a command injection vulnerability in the tdpServer daemon on TP-Link Archer A7/C7 routers, allowing unauthenticated remote code execution as root via crafted UDP packets on port 20002. The exploit includes a checksum calculation routine and payload delivery mechanism.
References (2)
Scores
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H