In the management interface on TP-Link Archer C5v 1.7_181221 devices, credentials are sent in a base64 format over cleartext HTTP. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.
TP-Link
Information Disclosure
Archer C5V Firmware
NVD
CVSS 3.1
7.1
EPSS
0.2%