Deviceways

Router

TP-LINK Archer C9

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1.x · Spansion S25FL128SAIF00
Open hardware record
v1
Retired support documentedOpen device guide
v1
Open hardware record
Original project github.com

v1

Device support in source
Retired; check the documented hardware and older release resources.
Limitations
WiFi 2.4GHz partly WiFi 5GHz
First installation
CFE TFTP recovery
Limitations
WiFi 2.4GHz partly
Limitations
WiFi 5GHz
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

tp-link archer c9 v1 — device documentation (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
v1

Device details

TP-LINK Archer C9 v1.x — TechInfoDepot (github.com)

Hardware revision
v1.x

Device details

TP-LINK Archer C9 v2.x — TechInfoDepot (github.com)

Hardware revision
v2.x

Device details

TP-LINK Archer C9 v4.x — TechInfoDepot (github.com)TP-LINK Archer C9 v4.x — WikiDevi (github.com)

Hardware revision
v4.x

Device details

TP-LINK Archer C9 v5.x — TechInfoDepot (github.com)

Hardware revision
v5.x

Device details

TP-LINK Archer C9 v1.x — WikiDevi (github.com)

Hardware revision
v1.x

Device details

TP-LINK Archer C9 v2.x — WikiDevi (github.com)

Hardware revision
v2.x

Device details

TP-LINK Archer C9 v5.x — WikiDevi (github.com)

Hardware revision
v5.x

OpenWrt · v1

OpenWrt · v1 — Source documentation (openwrt.org)

Installation routes recorded
CFE TFTP recovery
Recovery routes recorded
CFE TFTP recovery
Availability recorded by source
Discontinued

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

Listed in CISA KEV ↗CVSS 7.5 (v3.1)

TP-LINK Archer C9

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0),…

CVE-2015-3035

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

CVE published

Archer C9

Archer C1200 firmware versions prior to 'Archer C1200(JP)_V2_230508' and Archer C9 firmware versions prior to 'Archer C9(JP)_V3_230508' allow a network-adjacent unauthenticated attacker…

CVE-2023-38563

Affected firmware
firmware versions prior to 'Archer C9(JP)_V3_230508'
Fix
Fix details in the linked record
Read jpcert CVE record
Details and sources
CVE updated

Archer C1200 firmware versions prior to 'Archer C1200(JP)_V2_230508' and Archer C9 firmware versions prior to 'Archer C9(JP)_V3_230508' allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands.

CVE published

TP-Link Archer C9 A1

UNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)_V1_180125 firmware allows an unauthenticated actor, with physical access and network access, to read sensitive files and…

CVE-2020-5797

Affected firmware
Archer C9(US)_V1_180125 firmware
Fix
Fix details in the linked record
Read tenable CVE record
Details and sources
CVE updated

UNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)_V1_180125 firmware allows an unauthenticated actor, with physical access and network access, to read sensitive files and write to a limited set of files after plugging a crafted USB drive into the router.

Security advisory tra 2020 60 — TP-Link Archer C9 A1 (tenable.com) ↗
CVE published

TP-LINK Archer C9

passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed

CVE-2017-11519

Affected firmware
Version scope unspecified in source
Fix
This is fixed in C9(UN)_V2_170511.
Read mitre CVE record
Details and sources
CVE updated

passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9(UN)_V2_170511.

Check more security advisories for this device · CVE.org