Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2024-54126

Insufficient Integrity Verification Vulnerability in TP-Link Archer C50

Description

This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerability by uploading and executing malicious firmware which could lead to complete compromise of the targeted device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TP-Link Archer C50 Wireless Router

Default version status: unaffected

  • <Archer C50(EU)_V4_ 240917affected

References