CVE-2018-19537
Last modified
CVE-2018-19537 is a vulnerability of currently unknown severity. TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_hostname line of a configuration file that is encrypted with the 478DA50BF9E3D2CF key and uploaded through the web GUI by using the web admin account. The default password of admin may be used in some cases.. EPSS estimates a 5.98% chance of exploitation in the next 30 days.
Description
TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_hostname line of a configuration file that is encrypted with the 478DA50BF9E3D2CF key and uploaded through the web GUI by using the web admin account. The default password of admin may be used in some cases.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Archer C5 Firmware | <= 2_160201_us |
References
- https://github.com/JackDoan/TP-Link-ArcherC5-RCEExploit, Third Party Advisory
- https://github.com/JackDoan/TP-Link-ArcherC5-RCEExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-19537?
How severe is CVE-2018-19537?
How do I fix CVE-2018-19537?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-19527i4 assistant 7.85 allows XSS via a crafted machine name fiel…
- CVE-2018-19528TP-Link TL-WR886N 7.0 1.1.0 devices allow remote attackers t…
- CVE-2018-19530HTTL (aka Hyper-Text Template Language) through 1.0.11 allow…
- CVE-2018-19531HTTL (aka Hyper-Text Template Language) through 1.0.11 allow…
- CVE-2018-19532A NULL pointer dereference vulnerability exists in the funct…
- CVE-2018-19535In Exiv2 0.26 and previous versions, PngChunk::readRawProfil…6.5
- CVE-2018-19539An issue was discovered in JasPer 2.0.14. There is an access…
- CVE-2018-19540An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10…
- CVE-2018-19541An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10…
- CVE-2018-19542An issue was discovered in JasPer 2.0.14. There is a NULL po…
- CVE-2018-19543An issue was discovered in JasPer 2.0.14. There is a heap-ba…
- CVE-2018-19544JEECMS 9.3 has CSRF via the api/admin/content/save URI to ad…
Are you affected by CVE-2018-19537?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST