CVE-2024-21833

🗓️ 10 Jan 2024 23:25:25Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 110 Views

TP-LINK products vulnerability allows unauthenticated remote attacker to execute arbitrary commands

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-21833	11 Jan 202401:31	–	circl
CNNVD	Multiple TP-LINK Products Operating System Command Injection Vulnerability	9 Jan 202400:00	–	cnnvd
Cvelist	CVE-2024-21833	10 Jan 202423:25	–	cvelist
EUVD	EUVD-2024-19445	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple TP-Link products vulnerable to OS command injection	10 Jan 202404:57	–	jvn
NVD	CVE-2024-21833	11 Jan 202400:15	–	nvd
Prion	Design/Logic Flaw	11 Jan 202400:15	–	prion
Positive Technologies	PT-2024-1570	10 Jan 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-21833	23 May 202509:24	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2024-21833	10 Apr 202600:00	–	vulncheck_kev

NVD

Vulnrichment

Node

tp-link archer_ax3000_firmwareRange<1.1.2

AND

tp-link archer_ax3000Match1.0

Node

tp-link archer_ax5400_firmwareRange<1.1.2

AND

tp-link archer_ax5400Match1.0

Node

tp-link deco_x50_firmwareRange<1.4.1

AND

tp-link deco_x50Match1.0

Node

tp-link deco_xe200_firmwareRange<1.2.5

AND

tp-link deco_xe200Match1.0

Node

tp-link archer_axe75_firmwareRange<1.1.9

AND

tp-link archer_axe75Match1.0

[
  {
    "vendor": "TP-Link",
    "product": "Archer AX3000",
    "versions": [
      {
        "version": "firmware versions prior to \"Archer AX3000(JP)_V1_1.1.2 Build 20231115\"",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "TP-Link",
    "product": "Archer AX5400",
    "versions": [
      {
        "version": "firmware versions prior to \"Archer AX5400(JP)_V1_1.1.2 Build 20231115\"",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "TP-Link",
    "product": "Archer AXE75",
    "versions": [
      {
        "version": "firmware versions prior to \"Archer AXE75(JP)_V1_231115\"",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "TP-Link",
    "product": "Deco X50",
    "versions": [
      {
        "version": "firmware versions prior to \"Deco X50(JP)_V1_1.4.1 Build 20231122\"",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "TP-Link",
    "product": "Deco XE200",
    "versions": [
      {
        "version": "firmware versions prior to \"Deco XE200(JP)_V1_1.2.5 Build 20231120\"",
        "status": "affected"
      }
    ]
  }
]

Source	Link
tp-link	www.tp-link.com/jp/support/download/deco-x50/v1/
jvn	www.jvn.jp/en/vu/JVNVU91401812/
tp-link	www.tp-link.com/jp/support/download/archer-axe75/
tp-link	www.tp-link.com/jp/support/download/archer-ax3000/
tp-link	www.tp-link.com/jp/support/download/deco-xe200/
tp-link	www.tp-link.com/jp/support/download/archer-ax5400/

16 Jun 2025 19:15Current

9High risk

Vulners AI Score9

CVSS 3.18.8

EPSS0.0021

SSVC