Severity
Medium
Analysis Summary
CVE-2024-38471
TP-Link Archer products could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by OS command injection vulnerability. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands with elevated privileges on the device.
Impact
- Gain Access
Indicators of Compromise
CVE
- CVE-2024-38471
Affected Vendors
TP-Link
Affected Products
- TP-Link AXE75
- TP-Link AX5400
- TP-Link AXE5400
- TP-Link Air R5
- TP-Link Archer AX3000
Remediation
Upgrade to the latest version of Archer products, available from the TP-Link Website.