CVE-2024-53375

moderate-risk
Published 2024-12-02

An Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmp_get_sites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionality.

Do I need to act?

!
74.9% chance of exploitation in next 30 days
EPSS score — higher than 25% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.0/10 High
ADJACENT_NETWORK / LOW complexity

References (2)

https://github.com/ThottySploity/CVE-2024-53375
https://thottysploity.github.io/posts/cve-2024-53375/
49
/ 100
moderate-risk
Severity 25/34 · High
Exploitability 19/34 · Moderate
Exposure 5/34 · Minimal