Vulnerability Details CVE-2024-21821
Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 33.1%
CVSS Severity
CVSS v3 Score 8.0
References
- https://jvn.jp/en/vu/JVNVU91401812/
- https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware
- https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware
- https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware
- https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware
- https://jvn.jp/en/vu/JVNVU91401812/
- https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware
- https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware
- https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware
- https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware
Products affected by CVE-2024-21821
-
cpe:2.3:h:tp-link:archer_ax3000:1.0
-
cpe:2.3:h:tp-link:archer_ax5400:1.0
-
cpe:2.3:h:tp-link:archer_axe75:1.0
-
cpe:2.3:o:tp-link:archer_ax3000_firmware:1.0.0
-
cpe:2.3:o:tp-link:archer_ax3000_firmware:1.1.1
-
cpe:2.3:o:tp-link:archer_ax5400_firmware:1.0.1
-
cpe:2.3:o:tp-link:archer_ax5400_firmware:1.1.1
-
cpe:2.3:o:tp-link:archer_axe75_firmware:1.1.6
-
cpe:2.3:o:tp-link:archer_axe75_firmware:1.1.8