CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-08-31
TP-Link TL-WA855RE Wi-Fi Extender Unauthenticated Factory Reset and Unauthorized Access Vulnerability (CVE-2020-24363)
[Affected Scope] TP-Link TL-WA855RE V5 devices running firmware version 20200415-rel37464 or earlier.
[Impact] An unauthenticated attacker on the same network can force a factory reset and reboot via a TDDP_RESET POST request, subsequently gaining full administrative control by setting a new password.
[Mitigation] Apply the latest official firmware update from the manufacturer and restrict local network access to trusted hosts only.