CVE-2020-28347

tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute...

9.8 CriticalPublic exploit

tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slave_mac parameter. NOTE: this issue exists because of an incomplete fix for CVE-2020-10882 in which shell quotes are mishandled.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

75.0%Up 57.8 points since Apr 14, 2021

What each source reports

NVD Score used 9.8

Record: CVE-2020-28347
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-78
Updated: 2026-11-02

CVE List No score

Record: CVE-2020-28347
Updated: 2026-11-02

EUVDEUVD-2020-20809 No score

Record: EUVD-2020-20809
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3685-2v7g-3c6v No score

tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute...

Record: GHSA-3685-2v7g-3c6v
Weakness: CWE-77
Updated: 2026-11-02

Affected products

tp-link ac1750 firmware

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Metasploit	TP-Link Archer A7/C7 Unauthenticated LAN Remote Code Execution	2020-03-25

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-28347 is a critical vulnerability (CVSS 9.8) in Tp-link Ac1750 Firmware, published November 8, 2020. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 75.0%, the 99th percentile. No source names a fixed version.