CVE-2017-11519 | BDVDB-2026-87991 Detail

Description#

passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9(UN)_V2_170511.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.tp-link.com/en/download/Archer-C9_V2.html#Firmware
https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html

Exploit#

No public exploit known

History#

Version 12017-07-21Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.