{"id":"CVE-2024-38471","aliases":["EUVD-2024-37352","GHSA-37mw-xfjf-m6pf"],"status":"published","title":"Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to...","description":"Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00362,"percentile":0.30356,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2024-07-04T00:49:13Z","modified":"2026-06-17T07:40:20Z","products":[{"vendor":"tp-link","product":"archer air r5"},{"vendor":"tp-link","product":"archer ax3000"},{"vendor":"tp-link","product":"archer ax5400"},{"vendor":"tp-link","product":"archer axe5400"},{"vendor":"tp-link","product":"archer axe75"},{"vendor":"tp-link","product":"archer_airr5_firmware"},{"vendor":"tp-link","product":"archer_ax3000_firmware"},{"vendor":"tp-link","product":"archer_ax5400_firmware"},{"vendor":"tp-link","product":"archer_axe5400_firmware"},{"vendor":"tp-link","product":"archer_axe75_firmware"}],"references":[{"url":"https://www.tp-link.com/jp/support/download/","tags":["x_transferred"]},{"url":"https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware","tags":["x_transferred"]},{"url":"https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware","tags":["x_transferred"]},{"url":"https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware","tags":["x_transferred"]},{"url":"https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware","tags":["x_transferred"]},{"url":"https://www.tp-link.com/jp/support/download/archer-axe5400/#Firmware","tags":["x_transferred"]},{"url":"https://jvn.jp/en/vu/JVNVU99784493/","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38471"},{"url":"https://jvn.jp/en/vu/JVNVU99784493"},{"url":"https://www.tp-link.com/jp/support/download"},{"url":"https://github.com/advisories/GHSA-37mw-xfjf-m6pf"}],"sources":{"cve":[{"id":"CVE-2024-38471","description":"Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.","status":"published","published":"2024-07-04T00:49:13.216Z","modified":"2025-03-13T13:17:03.724Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:34:16.367792Z"}],"euvd":[{"id":"EUVD-2024-37352","description":"Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.","status":"published","published":"2024-07-04T00:49:13Z","modified":"2025-03-13T13:17:03Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T20:53:05.95539Z"}],"ghsa":[{"id":"GHSA-37mw-xfjf-m6pf","title":"Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to...","description":"Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.","status":"published","published":"2024-07-04T03:31:39Z","modified":"2025-03-13T15:32:34Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:00:15.533946Z"}],"nvd":[{"id":"CVE-2024-38471","description":"Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.","status":"published","published":"2024-07-04T01:15:02.4Z","modified":"2026-06-17T07:40:20.77Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:10:10.545705Z"}]}}