Date published: 2017-07-21T17:29:00.277-04:00
Date last modified: 2017-07-27T09:12:54.067-04:00
CVSS Score: 5.0
Principal attack vector: NETWORK
Reference URL: http://www.tp-link.com/en/download/Archer-C9_V2.html#Firmware
Summary: passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9(UN)_V2_170511.