CVE-2024-54126
High
Description
This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerability by uploading and executing malicious firmware which could lead to complete compromise of the targeted device.
SeverityHigh
CVSS8.5
Exploit probability—
Product
Archer C50 Wireless Router
PublishedDec 5, 2024
First seenDec 5, 2024
Weakness typeCWE-494CWE-494CWE-347CWE-347
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| TP-Link Archer C50 Wireless Router | <Archer C50(EU)_V4_ 240917 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.