What’s Vulnerable › Vulnerabilities

CVE-2024-48288

• Severity: high (CVSS 8.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-11-21 · updated 2026-06-17
• Weakness: CWE-77

Description

TP-Link TL-IPC42C V4.0_20211227_1.0.16 is vulnerable to command injection due to the lack of malicious code verification on both the frontend and backend.

Affected products

• TP-Link Tl-Ipc42C Firmware: 20211227_1.0.16

References

• https://github.com/GroundCTL2MajorTom/pocs/blob/main/Cisco_Linksys_E3000_rce.md
• https://github.com/GroundCTL2MajorTom/pocs/blob/main/TP-Link_TL-IPC42C_RCE.md

Get alerted when CVE-2024-48288 or the next vulnerability affects your stack