← Database

CVE-2021-44827

HIGH CVSS: 8.8 Published: 2022-03-04 Modified: 2026-06-17

Description

There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the X_TP_ExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges.

Affected Platforms

Tp-Link Archer C20ITp-Link Archer C20I Firmware

Weakness Type

CWE-78

References