Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-10883

41
FAUCET Score

CVE-2020-10883 is a local privilege escalation vulnerability affecting TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers, stemming from improper file system permissions. With a CVSS score of 7.8 (High), this flaw allows an attacker with low-privileged code execution to gain higher privileges, leading to potential complete compromise of confidentiality, integrity, and availability. While not listed in CISA KEV, a Metasploit module exists for exploitation, and it has a high FAUCET Risk Score of 96/100, though it lacks significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
190726CPE matchmatch criteria
cpe:2.3:o:tp-link:ac1750_firmware:190726:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

5.3MEDIUM

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
Exploitability Score
1.8
Impact Score
3.4
CvssVersion
3.0

Exploit Intelligence

EPSS Score
5.90%
Probability of exploitation in next 30 days
EPSS Percentile
92.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
Metasploit: TP-Link Archer A7/C7 Unauthenticated LAN Remote Code Execution · Mar 25, 2020
ExploitDB: EDB-48331 · Apr 16, 2020
This CVE's current EPSS score of 0.0590 is in the 98th percentile among its peer group of 16,985 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

packetstormsecurity.com / files/157255/TP-Link-Archer-A7-C7-Unauthenticated-LAN-Remote-Code-Execution.html
ExploitThird Party AdvisoryVDB Entry
zerodayinitiative.com / advisories/ZDI-20-335
Third Party AdvisoryVDB Entry