medium6.8
CVE-2024-38471
Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup fil…
Impact
Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/en/vu/JVNVU99784493/
- https://www.tp-link.com/jp/support/download/
- https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware
- https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware
- https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware
- https://www.tp-link.com/jp/support/download/archer-axe5400/#Firmware
- https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware
- https://jvn.jp/en/vu/JVNVU99784493/
- https://www.tp-link.com/jp/support/download/
- https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware
- https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware
- https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware
- https://www.tp-link.com/jp/support/download/archer-axe5400/#Firmware
- https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware