Critical Vulnerability in TP-Link Archer C5400X Gaming Router

TP-Link has released security updates to address a critical vulnerability (CVE-2024-5035) affecting their Archer C5400X gaming router product. The vulnerability has a Common Vulnerability Scoring System (CVSSv4) score of 10 out of 10.

Successful exploitation of the vulnerability could allow an unauthenticated remote attacker to execute arbitrary commands on the affected device with escalated privileges.

 The vulnerability affects versions 1_1.1.6 and earlier.

 Users and administrators are advised to update their products to the latest versions immediately.

 More information is available here:

https://nvd.nist.gov/vuln/detail/CVE-2024-5035
https://www.tp-link.com/en/support/download/archer-c5400x/#Firmware
https://onekey.com/blog/security-advisory-remote-command-execution-on-tp-link-archer-c5400x/