Security Advisory
CVE-2024-38471
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.