| CVE ID | CVE-2020-10883 |
| CVSS SCORE | 5.3, AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
| AFFECTED VENDORS |
TP-Link |
| AFFECTED PRODUCTS |
Archer A7 |
| VULNERABILITY DETAILS |
This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 AC1750 routers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the file system. The issue lies in the lack of proper permissions set on the file system. An attacker can leverage this vulnerability to escalate privileges. |
| ADDITIONAL DETAILS |
Fixed in version A7(US)_V5_200220 |
| DISCLOSURE TIMELINE |
|
| CREDIT | Pedro Ribeiro and Radek Domanski of Team Flashback |
