What is CVE-2020-10887?

CVE-2020-10887 is a critical-severity vulnerability in TP-Link Ac1750, classified under Protection Mechanism Failure. CVSS score: 9.8/10. Published 2020-03-25.

How severe is CVE-2020-10887?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in TP-Link Ac1750

CVE-2020-10887

This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of IPv6 connections. The issue results from the lack of proper filtering of IPv6 SSH connections. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-9663.

Published 2020-03-25 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.037 (89.3th percentile), scored 2026-09-30.

Low probability of exploitation in the next 30 days, but still tracked. 89th percentile — 89.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.042 · newest: 0.037 · change: -0.005

Affected products

TP-Link Ac1750
TP-Link Ac1750 Firmware — versions 190726
TP-Link Archer A7 — versions Firmware Ver: 190726

Weakness classification (CWE)

CWE-693 — Protection Mechanism Failure

References

www.zerodayinitiative.com/advisories/ZDI-20-338/ (VDB Entry, Third Party Advisory)

Frequently asked questions

What is CVE-2020-10887?: CVE-2020-10887 is a critical-severity vulnerability in TP-Link Ac1750, classified under Protection Mechanism Failure. CVSS score: 9.8/10. Published 2020-03-25.
How severe is CVE-2020-10887?: Critical severity. CVSS v3 base score is 9.8 out of 10.