CVE-2024-38471
Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected de…
Published: 2024-07-04 · CVSS: 6.8 · CVSS 3.1
Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7