Archer NX600 v1.0 vulnerabilities
4 known vulnerabilities in Archer NX600 v1.0 from TP-Link. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
Archer NX600 v3.0: Use of Hard-coded Credentials
A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-e
- 7.2 High severity
Archer NX600 v3.0: Improper Neutralization of Special Elements used in an OS Command
Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may ex
- 7.2 High severity
Archer NX600 v3.0: Improper Neutralization of Special Elements used in an OS Command
Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may ex
- 8.1 High severity
Archer NX600 v3.0: Missing Authentication for Critical Functionality
A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated users. An attacker may perform privileged HTTP actions without authentication, i