What’s Vulnerable › Vulnerabilities

CVE-2024-57357

• Severity: high (CVSS 8.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-07 · updated 2026-06-17
• Weakness: CWE-78

Description

An issue in TPLINK TL-WPA 8630 TL-WPA8630(US)_V2_2.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub_4256CC, which allows command injection by injecting 'devpwd'.

Affected products

• TP-Link Tl-Wpa8630 Firmware: 2.0.4-build_20230427

References

• https://github.com/c10uds/tplink-wpa8630-rce-vulnerability
• https://github.com/c10uds/tplink-wpa8630-rce-vulnerability

Get alerted when CVE-2024-57357 or the next vulnerability affects your stack