Router

TP-LINK Archer A7

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v5
Get OpenWrt firmware Release listed · 25.12.6
v5
Open hardware record Release listed · 25.12.5

Recorded configuration: 16 MB flash; 128 MB RAM

First installation
GUI OEM; U-Boot TFTP recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

tp-link archer a7 v5 — device documentation (github.com)Device details — v5 — Source documentation (openwrt.org)

Hardware revision
v5

Device details

TP-LINK Archer A7 v5.x — TechInfoDepot (github.com)TP-LINK Archer A7 v5.x — WikiDevi (github.com)

Hardware revision
v5.x

OpenWrt · v5

OpenWrt · v5 — v5 — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, U-Boot TFTP recovery
Recovery routes recorded
U-Boot TFTP recovery
Availability recorded by source
Available 2019

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVSS 9.8 (v3.0)

Archer A7

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers

CVE-2020-10881

Affected firmware
Firmware Ver: 190726
Fix
Fix details in the linked record
Read zdi CVE record
Details and sources

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DNS responses. A crafted DNS message can trigger an overflow of a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the root user. Was ZDI-CAN-9660.

Security advisory ZDI 20 333 — Archer A7 (zerodayinitiative.com) ↗

CVSS 8.8 (v3.0)

Archer A7

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers

CVE-2020-10882

Affected firmware
Firmware Ver: 190726
Fix
Fix details in the linked record
Read zdi CVE record
Details and sources

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on UDP port 20002 by default. When parsing the slave_mac parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the root user. Was ZDI-CAN-9650.

Security advisory ZDI 20 334 — Archer A7 (zerodayinitiative.com) ↗

CVSS 8.1 (v3.0)

Archer A7

This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 prior to Archer C7(US)_V5_210125 and Archer A7(US)_V5_200220 AC1750 routers

CVE-2021-27245

Affected firmware
prior to Archer C7(US)_V5_210125 and Archer A7(US)_V5_200220
Fix
Fix details in the linked record
Read zdi CVE record
Details and sources

This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 prior to Archer C7(US)_V5_210125 and Archer A7(US)_V5_200220 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of IPv6 connections. The issue results from the lack of proper filtering of IPv6 SSH connections. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-12309.

Security advisory ZDI 21 214 — Archer A7 (zerodayinitiative.com) ↗

CVSS 8.1 (v3.0)

Archer A7

This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers

CVE-2020-10887

Affected firmware
Firmware Ver: 190726
Fix
Fix details in the linked record
Read zdi CVE record
Details and sources

This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of IPv6 connections. The issue results from the lack of proper filtering of IPv6 SSH connections. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-9663.

Security advisory ZDI 20 338 — Archer A7 (zerodayinitiative.com) ↗

CVSS 8.1 (v3.0)

Archer A7

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers

CVE-2020-10886

Affected firmware
Firmware Ver: 190726
Fix
Fix details in the linked record
Read zdi CVE record
Details and sources

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tmpServer service, which listens on TCP port 20002. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9662.

Security advisory ZDI 20 339 — Archer A7 (zerodayinitiative.com) ↗
Check more security advisories for this device · CVE.org