CVE-2024-21821 - Vulnerability Details - OpenCVE

Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Vendors	Products
Tp-link	Archer Ax3000 Archer Ax3000 Firmware Archer Ax5400 Archer Ax5400 Firmware Archer Axe75 Archer Axe75 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:tp-link:archer_ax3000_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_ax3000:1.0:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:tp-link:archer_ax5400_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_ax5400:1.0:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:tp-link:archer_axe75_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_axe75:1.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://jvn.jp/en/vu/JVNVU91401812/
https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware
https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware
https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware
https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware

History

Tue, 17 Jun 2025 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2024-01-10T23:25:07.433Z

Updated: 2025-06-17T20:05:42.917Z

Reserved: 2024-01-04T00:17:52.223Z

Link: CVE-2024-21821

Vulnrichment

Updated: 2024-08-01T22:27:36.321Z

NVD

Status : Modified

Published: 2024-01-11T00:15:44.633

Modified: 2025-06-17T20:15:29.210

Link: CVE-2024-21821

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-21821", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "state": "PUBLISHED", "assignerShortName": "jpcert", "dateReserved": "2024-01-04T00:17:52.223Z", "datePublished": "2024-01-10T23:25:07.433Z", "dateUpdated": "2025-06-17T20:05:42.917Z"}, "containers": {"cna": {"affected": [{"vendor": "TP-Link", "product": "Archer AX3000", "versions": [{"version": "firmware versions prior to \"Archer AX3000(JP)_V1_1.1.2 Build 20231115\"", "status": "affected"}]}, {"vendor": "TP-Link", "product": "Archer AX5400", "versions": [{"version": "firmware versions prior to \"Archer AX5400(JP)_V1_1.1.2 Build 20231115\"", "status": "affected"}]}, {"vendor": "TP-Link", "product": "Archer AXE75", "versions": [{"version": "firmware versions prior to \"Archer AXE75(JP)_V1_231115\"", "status": "affected"}]}, {"vendor": "TP-Link", "product": "Archer Air R5", "versions": [{"version": "firmware versions prior to \"Archer Air R5(JP)_V1_1.1.6 Build 20240508\"", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands."}], "problemTypes": [{"descriptions": [{"description": "OS command injection", "lang": "en", "type": "text"}]}], "references": [{"url": "https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware"}, {"url": "https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware"}, {"url": "https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware"}, {"url": "https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware"}, {"url": "https://jvn.jp/en/vu/JVNVU91401812/"}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2024-07-03T23:04:01.432Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:27:36.321Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware", "tags": ["x_transferred"]}, {"url": "https://jvn.jp/en/vu/JVNVU91401812/", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-78", "lang": "en", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-06-17T20:04:42.959856Z", "id": "CVE-2024-21821", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-17T20:05:42.917Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware", "tags": ["x_transferred"]}, {"url": "https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware", "tags": ["x_transferred"]}, {"url": "https://jvn.jp/en/vu/JVNVU91401812/", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:27:36.321Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-21821", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-06-17T20:04:42.959856Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-17T20:05:38.687Z"}}], "cna": {"affected": [{"vendor": "TP-Link", "product": "Archer AX3000", "versions": [{"status": "affected", "version": "firmware versions prior to \"Archer AX3000(JP)_V1_1.1.2 Build 20231115\""}]}, {"vendor": "TP-Link", "product": "Archer AX5400", "versions": [{"status": "affected", "version": "firmware versions prior to \"Archer AX5400(JP)_V1_1.1.2 Build 20231115\""}]}, {"vendor": "TP-Link", "product": "Archer AXE75", "versions": [{"status": "affected", "version": "firmware versions prior to \"Archer AXE75(JP)_V1_231115\""}]}, {"vendor": "TP-Link", "product": "Archer Air R5", "versions": [{"status": "affected", "version": "firmware versions prior to \"Archer Air R5(JP)_V1_1.1.6 Build 20240508\""}]}], "references": [{"url": "https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware"}, {"url": "https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware"}, {"url": "https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware"}, {"url": "https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware"}, {"url": "https://jvn.jp/en/vu/JVNVU91401812/"}], "descriptions": [{"lang": "en", "value": "Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "OS command injection"}]}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2024-07-03T23:04:01.432Z"}}}, "cveMetadata": {"cveId": "CVE-2024-21821", "state": "PUBLISHED", "dateUpdated": "2025-06-17T20:05:42.917Z", "dateReserved": "2024-01-04T00:17:52.223Z", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "datePublished": "2024-01-10T23:25:07.433Z", "assignerShortName": "jpcert"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:archer_ax3000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5E511835-B9F8-48F6-85D0-92BD9EF6B93C", "versionEndExcluding": "1.1.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:archer_ax3000:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "60E38020-7C23-4B8E-B04C-DCC67A386004", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:archer_ax5400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "116BFAEE-8C19-4101-9754-CD55C951AA34", "versionEndExcluding": "1.1.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:archer_ax5400:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "76D439C9-D0A9-40C5-A91A-3FE205A0139D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:archer_axe75_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A08D2944-9064-46DC-91AC-9E6BC1BA274A", "versionEndExcluding": "1.1.9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:archer_axe75:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "EB55E594-03BC-425B-8CED-A7DC00A2DCBD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands."}, {"lang": "es", "value": "M\u00faltiples productos TP-LINK permiten que un atacante autenticado adyacente a la red ejecute comandos arbitrarios del sistema operativo. Los productos/versiones afectados son los siguientes: Versiones de firmware de Archer AX3000 anteriores a \"Archer AX3000(JP)_V1_1.1.2 Build 20231115\", versiones de firmware de Archer AX5400 anteriores a \"Archer AX5400(JP)_V1_1.1.2 Build 20231115\" y firmware de Archer AXE75 versiones anteriores a \"Archer AXE75(JP)_V1_231115\"."}], "id": "CVE-2024-21821", "lastModified": "2025-06-17T20:15:29.210", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-01-11T00:15:44.633", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU91401812/"}, {"source": "vultures@jpcert.or.jp", "url": "https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware"}, {"source": "vultures@jpcert.or.jp", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware"}, {"source": "vultures@jpcert.or.jp", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware"}, {"source": "vultures@jpcert.or.jp", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU91401812/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.tp-link.com/jp/support/download/archer-air-r5/v1/#Firmware"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/archer-ax3000/#Firmware"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/archer-ax5400/#Firmware"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://www.tp-link.com/jp/support/download/archer-axe75/#Firmware"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-78"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}