Vulnerability

CERT-In Vulnerability Note CIVN-2024-0354
Multiple Vulnerabilities in TP-Link Archer C50 Wireless Router

Original Issue Date:December 05, 2024

Severity Rating: MEDIUM

Systems Affected

TP-Link Archer C50 V4 - all firmware versions prior to Archer C50(EU)_V4_ 240917

Overview

Multiple vulnerabilities have been reported in TP-Link Archer C50 Wireless Router, which could allow an attacker to execute malicious firmware or obtain Wi-Fi credentials of the targeted device.

Target Audience:
End-users of TP-Link Archer C50 Wireless Router.

Risk Assessment:
Medium risk of unauthorized network access or system compromise.

Impact Assessment:
Potential for execution of malicious firmware, introducing backdoors into the device or gain unauthorized access to sensitive information.

Description

The TP-Link Archer C50 V4 is a dual-band wireless router designed for Small Office/Home Office (SOHO) networks.

1. Insufficient Integrity Verification Vulnerability ( CVE-2024-54126 )

This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router�s Wi-Fi range could exploit this vulnerability by uploading and executing malicious firmware which could lead to complete compromise of the targeted device.

2. Exposure of Wi-Fi Credentials in Plaintext ( CVE-2024-54127 )

This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could allow the attacker to obtain Wi-Fi credentials of the targeted system.

Credit

CVE-2024-54126 is reported by Khalid Markar, Amey Chavekar, Sushant Mane & Dr. Faruk Kazi from CoE-CNDS Lab, VJTI, Mumbai
CVE-2024-54127 is reported by Amey Chavekar, Khalid Markar & Dr. Faruk Kazi from CoE-CNDS Lab, VJTI, Mumbai.

Solution

Upgrade to Archer C50(EU)_V4_ 240917
https://static.tp-link.com/upload/firmware/2024/202411/20241125/Archer%20C50(EU)_V4_240917.zip

Vendor Information

TP-Link
https://www.tp-link.com/en/support/download/archer-c50/v4/#Firmware

References

TP-Link
https://www.tp-link.com/en/support/download/archer-c50/v4/#Firmware

CVE Name
CVE-2024-54126
CVE-2024-54127

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-22902657

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India