216.73.217.86

CVE-2024-54126

· Published 05/12/2024 13:15 · Modified 05/12/2024 13:15

Labels: CVE-2024-54126 2024-12-05CVE-2024-54126CWE-347[email protected]

Essential information

Published
05/12/2024 13:15
Modified
05/12/2024 13:15
Author
Creator
CISA KEV
No
CWE

Description

This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerability by uploading and executing malicious firmware which could lead to complete compromise of the targeted device.

NVD status

Status
Awaiting Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

References