CVE-2024-21821 - OpenCVE

Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX3000 firmware versions prior to "Archer AX3000(JP)_V1_1.1.2 Build 20231115", Archer AX5400 firmware versions prior to "Archer AX5400(JP)_V1_1.1.2 Build 20231115", and Archer AXE75 firmware versions prior to "Archer AXE75(JP)_V1_231115".

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Tp-link	Archer Ax5400 Archer Ax3000 Firmware Archer Axe75 Archer Ax3000 Archer Axe75 Firmware Archer Ax5400 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:tp-link:archer_ax3000_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_ax3000:1.0:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:tp-link:archer_ax5400_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_ax5400:1.0:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:tp-link:archer_axe75_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_axe75:1.0:*:*:*:*:*:*:*

References

Link	Resource
https://jvn.jp/en/vu/JVNVU91401812/	Third Party Advisory
https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware	Product
https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware	Product
https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware	Product

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: jpcert

Published: 2024-01-10T23:25:07.433Z

Updated: 2024-07-03T23:04:01.432Z

Reserved: 2024-01-04T00:17:52.223Z

Link: CVE-2024-21821

JSON object: View

NVD Information

Status : Analyzed

Published: 2024-01-11T00:15:44.633

Modified: 2024-01-18T17:08:35.830

Link: CVE-2024-21821

JSON object: View

Redhat Information

No data.

CWE

CWE-78

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:archer_ax3000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5E511835-B9F8-48F6-85D0-92BD9EF6B93C", "versionEndExcluding": "1.1.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:archer_ax3000:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "60E38020-7C23-4B8E-B04C-DCC67A386004", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:archer_ax5400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "116BFAEE-8C19-4101-9754-CD55C951AA34", "versionEndExcluding": "1.1.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:archer_ax5400:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "76D439C9-D0A9-40C5-A91A-3FE205A0139D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:archer_axe75_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A08D2944-9064-46DC-91AC-9E6BC1BA274A", "versionEndExcluding": "1.1.9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:archer_axe75:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "EB55E594-03BC-425B-8CED-A7DC00A2DCBD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX3000 firmware versions prior to \"Archer AX3000(JP)_V1_1.1.2 Build 20231115\", Archer AX5400 firmware versions prior to \"Archer AX5400(JP)_V1_1.1.2 Build 20231115\", and Archer AXE75 firmware versions prior to \"Archer AXE75(JP)_V1_231115\"."}, {"lang": "es", "value": "M\u00faltiples productos TP-LINK permiten que un atacante autenticado adyacente a la red ejecute comandos arbitrarios del sistema operativo. Los productos/versiones afectados son los siguientes: Versiones de firmware de Archer AX3000 anteriores a \"Archer AX3000(JP)_V1_1.1.2 Build 20231115\", versiones de firmware de Archer AX5400 anteriores a \"Archer AX5400(JP)_V1_1.1.2 Build 20231115\" y firmware de Archer AXE75 versiones anteriores a \"Archer AXE75(JP)_V1_231115\"."}], "id": "CVE-2024-21821", "lastModified": "2024-01-18T17:08:35.830", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-01-11T00:15:44.633", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU91401812/"}, {"source": "vultures@jpcert.or.jp", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware"}, {"source": "vultures@jpcert.or.jp", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware"}, {"source": "vultures@jpcert.or.jp", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "nvd@nist.gov", "type": "Primary"}]}