CVE-2020-9375

HIGH

Tp-link Archer C50 - Resource Leak

Title source: rule

Description

TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field.

Exploits (3)

exploitdb WORKING POC
by thewhiteh4t · pythondoshardware
https://www.exploit-db.com/exploits/48255
nomisec WORKING POC 20 stars
by thewhiteh4t · poc
https://github.com/thewhiteh4t/cve-2020-9375
gitlab WORKING POC
by takertao · poc
https://gitlab.com/takertao/cve-2020-9375

Scores

CVSS v3 7.5
EPSS 0.2804
EPSS Percentile 96.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-772
Status published
Products (3)
tp-link/archer_c50 build_170822
tp-link/archer_c50 build_171227
tp-link/archer_c50 build_200318
Published Mar 25, 2020
Tracked Since Feb 18, 2026