CVE-2024-54127

CVSS V2 None CVSS V3 None

Description

This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could allow the attacker to obtain Wi-Fi credentials of the targeted system.

Overview

CVE ID
CVE-2024-54127

Assigner
CERT-In

Vulnerability Status
PUBLISHED

Published Version
2024-12-05T12:19:24.519Z

Last Modified Date
2024-12-05T15:55:53.552Z

Weakness Enumerations

CWE	URL
CWE-312	http://cwe.mitre.org/data/definitions/312.html

References

Reference URL	Reference Tags
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0354	third-party-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-54127
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54127

History

Created	Old Value	New Value	Data Type	Notes
2024-12-06 13:11:28				Added to TrackCVE