CVE-2024-21821
HIGH 8.0EPSS 0.4%
Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands.
- Affected
- TP-Link · Archer AX3000 · Archer AX5400 · Archer AXE75 · Archer Air R5
- CVSS v3.1 NVD
- 8.0 HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.45% chance of exploitation in the next 30 days, 37th percentile
- Published
- 2024-01-10
- Updated
- 2025-06-17
Proof-of-concept exploits (1)
- neighborhood-H/1-DAY_Confirmation2★ · 2025-12-22
Security advisories
- https://jvn.jp/en/vu/JVNVU91401812
- https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware
- https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware
- https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware