Protection Mechanism Failure in Archer A7 - CVE-2020-10887
Published: March 26, 2020
Vulnerability identifier: #VU26408
CSH Severity: High
CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-10887
CWE-ID: CWE-693
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to insufficient implementation of security measures within the handling of IPv6 connections. An attacker can bypass implemented security restrictions andexecute arbitrary code on the system.
Affected software
Archer A7
How to mitigate CVE-2020-10887
Install updates from vendor's website.
Archer A7 - update to 200220