CVE-2017-11519

Critical

Published: 21/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The passwd_recovery.lua file on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This issue is fixed in version C9(UN)_V2_170511.

Risk Assessment

An attacker could gain access to the admin account, potentially leading to loss of control over the device and network.

Recommendation

It is recommended to update the router to version C9(UN)_V2_170511 to mitigate this vulnerability.

Original NVD description (English source)

passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9(UN)_V2_170511.