Authorization Bypass in HTTP Server Endpoints on TP-Link Archer NX200, NX210, NX500 and NX600
A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated users. An attacker may perform privileged HTTP actions without authentication, including firmware upload and configuration operations.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Archer NX600 v3.0
Vendor
TP-Link Systems Inc.
Product
Archer NX600 v3.0
Platforms
Linux
Default status
unaffected
Archer NX600 v3.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.3.0 Build 260309
Unavailable
None listed
Archer NX600 v2.0
Vendor
TP-Link Systems Inc.
Product
Archer NX600 v2.0
Platforms
Linux
Default status
unaffected
Archer NX600 v2.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.3.0 Build 260311
Unavailable
None listed
Archer NX600 v1.0
Vendor
TP-Link Systems Inc.
Product
Archer NX600 v1.0
Platforms
Linux
Default status
unaffected
Archer NX600 v1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.4.0 Build 260311
Unavailable
None listed
Archer NX500 v2.0
Vendor
TP-Link Systems Inc.
Product
Archer NX500 v2.0
Platforms
Linux
Default status
unaffected
Archer NX500 v2.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
< 1.5.0 Build 260309
Unavailable
None listed
Archer NX500 v1.0
Vendor
TP-Link Systems Inc.
Product
Archer NX500 v1.0
Platforms
Linux
Default status
unaffected
Archer NX500 v1.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.3.0 Build 260311
Unavailable
None listed
Archer NX210 v3.0
Vendor
TP-Link Systems Inc.
Product
Archer NX210 v3.0
Platforms
Linux
Default status
unaffected
Archer NX210 v3.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.3.0 Build 260309
Unavailable
None listed
Archer NX210 v2.0 v2.20
Vendor
TP-Link Systems Inc.
Product
Archer NX210 v2.0 v2.20
Platforms
Linux
Default status
unaffected
Archer NX210 v2.0 v2.20 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.3.0 Build 260311
Unavailable
None listed
Archer NX200 v3.0
Vendor
TP-Link Systems Inc.
Product
Archer NX200 v3.0
Platforms
Linux
Default status
unaffected
Archer NX200 v3.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
< 1.3.0 Build 260309
Unavailable
None listed
Archer NX200 v2.20
Vendor
TP-Link Systems Inc.
Product
Archer NX200 v2.20
Platforms
Linux
Default status
unaffected
Archer NX200 v2.20 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.3.0 Build 260311
Unavailable
None listed
Archer NX200 v2.0
Vendor
TP-Link Systems Inc.
Product
Archer NX200 v2.0
Platforms
Linux
Default status
unaffected
Archer NX200 v2.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.3.0 Build 260311
Unavailable
None listed
Archer NX200 v1.0
Vendor
TP-Link Systems Inc.
Product
Archer NX200 v1.0
Platforms
Linux
Default status
unaffected
Archer NX200 v1.0 · Scoped product and version facts