CVE-2024-21833
11.01.2024, 00:15
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.
| Vendor | Product | Version |
|---|---|---|
| tp-link | archer_ax3000_firmware | 𝑥 < 1.1.2 |
| tp-link | archer_ax5400_firmware | 𝑥 < 1.1.2 |
| tp-link | deco_x50_firmware | 𝑥 < 1.4.1 |
| tp-link | deco_xe200_firmware | 𝑥 < 1.2.5 |
| tp-link | archer_axe75_firmware | 𝑥 < 1.1.9 |
𝑥
= Vulnerable software versions
References