CVE-2020-10883CWE-732

This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers

Medium · published March 25, 2020

CVSS v3.0
5.3
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the file system. The issue lies in the lack of proper permissions set on the file system. An attacker can leverage this vulnerability to escalate privileges. Was ZDI-CAN-9651.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.05271 · 92.5th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2020-03-25T19:15Z
EPSS history
Timeline
  • 25 MAR 19:15Z
    This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers
    cvelistv5