CVE-2020-10884 - CVE House
Back to Database
Status published High CVE-2020-10884

This vulnerability allows network-adjacent attackers execute arbitrary code on affected...

Vulnerability Description

This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on UDP port 20002 by default. This issue results from the use of hard-coded encryption key. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-9652.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-10884

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Pedro Ribeiro and Radek Domanski of Team Flashback

References

More from TP-Link

View All →
CVE-2025-40634
Stack-based buffer overflow in TP-Link Archer AX50
Critical 9.2
CVE-2025-3442
Information Disclosure Vulnerability in TP-Link Tapo IoT Smart Hub
Medium 4.4
CVE-2025-1099
Information Disclosure Vulnerability in TP-Link Tapo C500 Wi-Fi Camera
High 7
CVE-2025-0730
TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings
Medium 6.3
CVE-2025-0729
TP-Link TL-SG108E clickjacking
Medium 6.9

Affected Vendor

Affected Software

Archer A7
Vulnerable Versions:
Firmware Ver: 190726

Timeline

Official Publish: March 25th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-321

MITRE ATT&CK TTPs

T1552 Unsecured Credentials
Credential Access
T1040 Network Sniffing
Credential Access
T1537 Transfer Data to Cloud Account
Credential Access
T1078 Valid Accounts
Persistence
T1041 Exfiltration Over C2 Channel
Exfiltration