Back to Database
Status published
Unknown
CVE-2024-38471
Multiple TP-LINK products allow a network-adjacent attacker with an administrative...
Vulnerability Description
Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-38471
Credits & Attribution
No credits recorded in the NVD database.
References
- https://www.tp-link.com/jp/support/download/
- https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware
- https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware
- https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware
- https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware
- https://www.tp-link.com/jp/support/download/archer-axe5400/#Firmware
- https://jvn.jp/en/vu/JVNVU99784493/
More from TP-LINK
View All →CVE-2024-9284
TP-LINK TL-WR841ND popupSiteSurveyRpm.htm stack-based overflow
High
7.1
CVE-2023-40531
Archer AX6000 firmware versions prior to 'Archer AX6000(JP)_V1_1.3.0 Build 20221208'...
Unknown
0
CVE-2023-40357
Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute...
Unknown
0
CVE-2023-40193
Deco M4 firmware versions prior to 'Deco M4(JP)_V2_1.5.8 Build 20230619'...
Unknown
0
CVE-2023-39935
Archer C5400 firmware versions prior to 'Archer C5400(JP)_V2_230506' allows a...
Unknown
0
Affected Vendor
TP-LINK
View all reports →Affected Software
Archer AX3000, Archer AXE75, Archer AX5400, Archer Air R5, Archer AXE5400
Vulnerable Versions:
firmware versions prior to "Archer AX3000(JP)_V1_1.1.3 Build 20240415", firmware versions prior to "Archer AXE75(JP)_V1_1.2.0 Build 20240320", firmware versions prior to "Archer AX5400(JP)_V1_1.1.4 Build 20240429", firmware versions prior to "Archer Air R5(JP)_V1_1.1.6 Build 20240508", firmware versions prior to "Archer AXE5400(JP)_V1_1.0.3 Build 20240319"
Timeline
Official Publish:
July 4th, 2024
Last Modified:
March 13th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.