CVE-2024-46486

HIGH EPSS 51.8%
Published Oct 4, 20241y ago · Modified Jun 17, 20261w ago
8.0 CVSS 3.1
High
Find Similar
Published Oct 4, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

TP-LINK TL-WDR5620 v2.3 was discovered to contain a remote code execution (RCE) vulnerability via the httpProcDataSrv function.

CVSS Details

Base Score
8.0
Exploitability
2.1
Impact
5.9
Vector string
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Adjacent
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
51.8% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-78 OS Command Injection Injection

Affected Products 2

VendorProductVersionRange
tp-linktl-wdr5620_firmware2.6.60any
tp-linktl-wdr56202.3any

References 2

  • github.com https://github.com/fishykz/TP-POC
    ExploitThird Party Advisory
  • yuhehe88.github.io https://yuhehe88.github.io/2024/09/04/TL-WDR5620-Gigabit-Edition-v2-3/
    ExploitThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.