VULNERABILITY INTELLIGENCE

CVE-2017-11519

CVSS score9.8 CRITICAL
EPSS probability3.05%
CISA KEVNot currently listed
Published2017-07-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9(UN)_V2_170511.

Weakness classification

  • CWE-335: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

Primary references