CVE-2020-24363highunder attackCWE-306

CVE-2020-24363

Published · Updated

76Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 8.8epss 22%
from disclosure to weapon84 days
Published on NVDAug 31
1st PoC+84d
CISA KEV+1828d
exploitation probability
22%top 2% of all CVEs
observed exploitation
yesCISA + VulnCheck
1 public exploit(s)
Action required by CISAfederal deadline: 2025-09-23

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

A TP-Link WiFi repeater (TL-WA855RE V5) can be factory reset by anyone on the same network without any password, allowing an attacker to set a new admin password and take control of the device.

Technical detail

An unauthenticated attacker on the same local network can send a TDDP_RESET POST request to trigger a factory reset and reboot, bypassing access control mechanisms (CWE-306). Post-reset, the attacker can configure a new administrative password, achieving full device compromise.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/49092unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://malwrforensics.com/en/2020/08/31/cve-2020-24363-tl-wa855re-v5-advisory/https://pastebin.com/VjHM4UiAhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-24363https://www.tp-link.com/us/support/download/tl-wa855re/#Firmware