{"id":"CVE-2024-21821","aliases":["EUVD-2024-19433","GHSA-wqqq-355c-2q6w"],"status":"published","title":"Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS...","description":"Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands.","severity":{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00446,"percentile":0.39263,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2024-01-10T23:25:07Z","modified":"2026-06-17T07:10:13Z","products":[{"vendor":"tp-link","product":"archer air r5"},{"vendor":"tp-link","product":"archer ax3000"},{"vendor":"tp-link","product":"archer ax5400"},{"vendor":"tp-link","product":"archer axe75"},{"vendor":"tp-link","product":"archer_ax3000_firmware"},{"vendor":"tp-link","product":"archer_ax5400_firmware"},{"vendor":"tp-link","product":"archer_axe75_firmware"}],"references":[{"url":"https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware","tags":["x_transferred","Product"]},{"url":"https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware","tags":["x_transferred","Product"]},{"url":"https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware","tags":["x_transferred","Product"]},{"url":"https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware","tags":["x_transferred"]},{"url":"https://jvn.jp/en/vu/JVNVU91401812/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21821"},{"url":"https://jvn.jp/en/vu/JVNVU91401812"},{"url":"https://github.com/advisories/GHSA-wqqq-355c-2q6w"}],"sources":{"cve":[{"id":"CVE-2024-21821","description":"Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands.","status":"published","published":"2024-01-10T23:25:07.433Z","modified":"2025-06-17T20:05:42.917Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:34:05.077718Z"}],"euvd":[{"id":"EUVD-2024-19433","description":"Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands.","status":"published","published":"2024-01-10T23:25:07Z","modified":"2025-06-17T20:05:42Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:21.932311Z"}],"ghsa":[{"id":"GHSA-wqqq-355c-2q6w","title":"Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS...","description":"Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX3000 firmware versions prior to \"Archer AX3000(JP)_V1_1.1.2 Build 20231115\", Archer AX5400 firmware versions prior to \"Archer AX5400(JP)_V1_1.1.2 Build 20231115\", and Archer AXE75 firmware versions prior to \"Archer AXE75(JP)_V1_231115\".","status":"published","published":"2024-01-11T00:30:26Z","modified":"2024-07-04T00:37:44Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:57:38.695929Z"}],"nvd":[{"id":"CVE-2024-21821","description":"Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands.","status":"published","published":"2024-01-11T00:15:44.633Z","modified":"2026-06-17T07:10:13.433Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:09:30.070039Z"}]}}