CVE-2023-30383 - Vulnerability Details - OpenCVE

TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer overflow which may lead to a Denial of Service (DoS) when parsing crafted data.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Tp-link	Archer C2 Archer C20 Archer C20 Firmware Archer C2 V1 Archer C2 V1 Firmware Archer C50 Archer C50 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:tp-link:archer_c2_v1_firmware:170228:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_c2_v1:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:tp-link:archer_c20_firmware:150707:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_c20:1:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:tp-link:archer_c50_firmware:160801:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_c50:2:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://tplink.com
https://gist.github.com/a2ure123/a4eda2813d85d8b414bb87e855ab4bf8
https://www.tp-link.com/us/support/download/archer-c2/v1/#Firmware
https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware
https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware%29%2CTPLINK

History

Mon, 28 Oct 2024 19:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Tp-link archer C2
CPEs		cpe:2.3:h:tp-link:archer_c2:-:::::::* cpe:2.3:h:tp-link:archer_c50:-:::::::*
Vendors & Products		Tp-link archer C2
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-07-18T00:00:00

Updated: 2024-10-28T18:35:54.750Z

Reserved: 2023-04-07T00:00:00

Link: CVE-2023-30383

Vulnrichment

Updated: 2024-08-02T14:21:44.817Z

NVD

Status : Modified

Published: 2023-07-18T19:15:09.643

Modified: 2024-11-21T08:00:07.040

Link: CVE-2023-30383

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-30383", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-10-28T18:35:54.750Z", "dateReserved": "2023-04-07T00:00:00", "datePublished": "2023-07-18T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-07-18T00:00:00"}, "descriptions": [{"lang": "en", "value": "TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer overflow which may lead to a Denial of Service (DoS) when parsing crafted data."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "http://tplink.com"}, {"url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware%29%2CTPLINK"}, {"url": "https://www.tp-link.com/us/support/download/archer-c2/v1/#Firmware"}, {"url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware"}, {"url": "https://gist.github.com/a2ure123/a4eda2813d85d8b414bb87e855ab4bf8"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T14:21:44.817Z"}, "title": "CVE Program Container", "references": [{"url": "http://tplink.com", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware%29%2CTPLINK", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/us/support/download/archer-c2/v1/#Firmware", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware", "tags": ["x_transferred"]}, {"url": "https://gist.github.com/a2ure123/a4eda2813d85d8b414bb87e855ab4bf8", "tags": ["x_transferred"]}]}, {"affected": [{"vendor": "tp-link", "product": "archer_c50", "cpes": ["cpe:2.3:h:tp-link:archer_c50:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "v2_160801", "status": "affected"}]}, {"vendor": "tp-link", "product": "archer_c20", "cpes": ["cpe:2.3:h:tp-link:archer_c20:1:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "v1_150707", "status": "affected"}]}, {"vendor": "tp-link", "product": "archer_c2", "cpes": ["cpe:2.3:h:tp-link:archer_c2:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "v1_170228", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-28T18:32:54.899161Z", "id": "CVE-2023-30383", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-28T18:35:54.750Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://tplink.com", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware%29%2CTPLINK", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/us/support/download/archer-c2/v1/#Firmware", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware", "tags": ["x_transferred"]}, {"url": "https://gist.github.com/a2ure123/a4eda2813d85d8b414bb87e855ab4bf8", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T14:21:44.817Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-30383", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-28T18:32:54.899161Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:tp-link:archer_c50:-:*:*:*:*:*:*:*"], "vendor": "tp-link", "product": "archer_c50", "versions": [{"status": "affected", "version": "v2_160801"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:tp-link:archer_c20:1:*:*:*:*:*:*:*"], "vendor": "tp-link", "product": "archer_c20", "versions": [{"status": "affected", "version": "v1_150707"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:tp-link:archer_c2:-:*:*:*:*:*:*:*"], "vendor": "tp-link", "product": "archer_c2", "versions": [{"status": "affected", "version": "v1_170228"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-28T18:35:47.419Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "http://tplink.com"}, {"url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware%29%2CTPLINK"}, {"url": "https://www.tp-link.com/us/support/download/archer-c2/v1/#Firmware"}, {"url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware"}, {"url": "https://gist.github.com/a2ure123/a4eda2813d85d8b414bb87e855ab4bf8"}], "descriptions": [{"lang": "en", "value": "TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer overflow which may lead to a Denial of Service (DoS) when parsing crafted data."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-07-18T00:00:00"}}}, "cveMetadata": {"cveId": "CVE-2023-30383", "state": "PUBLISHED", "dateUpdated": "2024-10-28T18:35:54.750Z", "dateReserved": "2023-04-07T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2023-07-18T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:archer_c2_v1_firmware:170228:*:*:*:*:*:*:*", "matchCriteriaId": "E67A17E5-2199-4FFC-A9ED-DA1694CAC531", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:archer_c2_v1:-:*:*:*:*:*:*:*", "matchCriteriaId": "10AEB762-E804-46FF-B37D-5CC21A1EFEB7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:archer_c20_firmware:150707:*:*:*:*:*:*:*", "matchCriteriaId": "7EBCD60C-2B46-4A7F-821A-2852267A0114", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:archer_c20:1:*:*:*:*:*:*:*", "matchCriteriaId": "9D159009-CF48-4631-9139-5AB553B58018", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:archer_c50_firmware:160801:*:*:*:*:*:*:*", "matchCriteriaId": "9DD711B4-011F-4576-97FA-20857549E6FD", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:archer_c50:2:*:*:*:*:*:*:*", "matchCriteriaId": "FBAF991B-15EB-4858-B7A7-18FA24C180DC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer overflow which may lead to a Denial of Service (DoS) when parsing crafted data."}], "id": "CVE-2023-30383", "lastModified": "2024-11-21T08:00:07.040", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-07-18T19:15:09.643", "references": [{"source": "cve@mitre.org", "tags": ["Product"], "url": "http://tplink.com"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://gist.github.com/a2ure123/a4eda2813d85d8b414bb87e855ab4bf8"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://www.tp-link.com/us/support/download/archer-c2/v1/#Firmware"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware"}, {"source": "cve@mitre.org", "url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware%29%2CTPLINK"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "http://tplink.com"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://gist.github.com/a2ure123/a4eda2813d85d8b414bb87e855ab4bf8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://www.tp-link.com/us/support/download/archer-c2/v1/#Firmware"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware%29%2CTPLINK"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}], "source": "nvd@nist.gov", "type": "Primary"}]}