CVE-2024-21773
Assigner: jpcert
Published: 2024-01-10T23:24:50.112Z
State: PUBLISHED
affected: vendor: TP-Link
product: Archer AX3000
versions: version: firmware versions prior to "Archer AX3000(JP)_V1_1.1.2 Build 20231115"
status: affected
vendor: TP-Link
product: Archer AX5400
versions: version: firmware versions prior to "Archer AX5400(JP)_V1_1.1.2 Build 20231115"
status: affected
vendor: TP-Link
product: Deco X50
versions: version: firmware versions prior to "Deco X50(JP)_V1_1.4.1 Build 20231122"
status: affected
vendor: TP-Link
product: Deco XE200
versions: version: firmware versions prior to "Deco XE200(JP)_V1_1.2.5 Build 20231120"
status: affected
descriptions: value: Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX3000 firmware versions prior to "Archer AX3000(JP)_V1_1.1.2 Build 20231115", Archer AX5400 firmware versions prior to "Archer AX5400(JP)_V1_1.1.2 Build 20231115", Deco X50 firmware versions prior to "Deco X50(JP)_V1_1.4.1 Build 20231122", and Deco XE200 firmware versions prior to "Deco XE200(JP)_V1_1.2.5 Build 20231120".
problemTypes: descriptions: description: Information disclosure
type: text