返回 CVE 浏览器

CVE-2020-24363

🔥 Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score92.6820%

EPSS Percentile97.83th

Published2020-08-31

Last Modified2025-11-07

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password.

Affected Platforms (CPE)

💻

Tp Link

Tl Wa855re Firmware

< 200731

References & Advisories

🔗 http://malwrforensics.com/en/2020/08/31/cve-2020-24363-tl-wa855re-v5-advisory/

🔗 https://pastebin.com/VjHM4UiA

🔗 https://www.tp-link.com/us/support/download/tl-wa855re/#Firmware

🔗 http://malwrforensics.com/en/2020/08/31/cve-2020-24363-tl-wa855re-v5-advisory/

🔗 https://pastebin.com/VjHM4UiA

🔗 https://www.tp-link.com/us/support/download/tl-wa855re/#Firmware

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-24363

相关漏洞威胁

CVE-2026-167718.8

In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-b...

CVE-2026-120015.2

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, Archer C20 v6...

CVE-2026-658937.0

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with ...

CVE-2026-645208.4

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The ...