Vulnerability CVE-2024-38471
Published: 2024-07-04

Description:
Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.

 References:
https://www.tp-link.com/jp/support/download/
https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware
https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware
https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware
https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware
https://www.tp-link.com/jp/support/download/archer-axe5400/#Firmware
https://jvn.jp/en/vu/JVNVU99784493/
Copyright 2026, cxsecurity.com

 

Back to Top