CVE-2020-24297

httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests…

published November 18, 2020

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests to the endpoint /admin/powerline. Fixed version: TL-WPA4220(EU)_V4_201023

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03653 · 89.6th percentile
Published
2020-11-18T15:28Z
EPSS history
Timeline
  • 18 NOV 15:28Z
    httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests…
    cvelistv5