Skip to content
OpenAdvisories
High · 8.0 CVE-2024-21821 EUVD-2024-19433GHSA-wqqq-355c-2q6w

Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute …

Published Jan 10, 2024 · Updated Jun 17, 2025 · Assigned by jpcert

Vendor: TP-Link Systems Product: Archer Air R5 Product: Archer AX3000 Product: Archer AX5400 Product: Archer AXE75 Category: Network devices

Description

Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands.

Affected products

VendorProductAffectedFixed
TP-Link Archer AX3000 firmware versions prior to "Archer AX3000(JP)_V1_1.1.2 Build 20231115" —
TP-Link Archer AX5400 firmware versions prior to "Archer AX5400(JP)_V1_1.1.2 Build 20231115" —
TP-Link Archer AXE75 firmware versions prior to "Archer AXE75(JP)_V1_231115" —
TP-Link Archer Air R5 firmware versions prior to "Archer Air R5(JP)_V1_1.1.6 Build 20240508" —

References