Addressing vulnerabilities of the Archer C2 and Archer C20i routers

We at TP-Link are aware of the potential vulnerabilities of two home router models: the Archer C2 and Archer C20i. After diagnosing the two models, we have found that exploiting these vulnerabilities require obtaining the username and password for logging in the router's web management page.

The official firmware to repair these vulnerabilities will be released on the official TP-Link website, tp-link.com, in February 2017. In the meantime, customers using the Archer C2 or Archer C20i routers are urged to create a unique username and password for logging into their router's web management page (learn how here). The username and password should be complex, consisting of a combination of lower and uppercase letters, numbers and special characters. Do not use the default name and password. With these steps, vulnerabilities will be circumvented.

Update:

New firmwares are published to fix the vulnerabilities, please find firmware of your model to download  on the official website: http://www.tp-link.com.