NA

CVE-2024-5035

Published: 27/05/2024 Updated: 29/05/2024

Vulnerability Summary

The affected device expose a network service called "rftest" that is vulnerable to unauthenticated command injection on ports TCP/8888, TCP/8889, and TCP/8890. By successfully exploiting this flaw, remote unauthenticated attacker can gain arbitrary command execution on the device with elevated privileges.This issue affects Archer C4500X: through 1_1.1.6.

Vulnerability Trend

Recent Articles

TP-Link fixes critical RCE bug in popular C5400X gaming router
BleepingComputer • Bill Toulas • 27 May 2024

TP-Link fixes critical RCE bug in popular C5400X gaming router By Bill Toulas May 27, 2024 03:11 PM 0 The TP-Link Archer C5400X gaming router is vulnerable to security flaws that could enable an unauthenticated, remote attacker to execute commands on the device. The TP-Link Archer C5400X is a high-end tri-band gaming router designed to provide robust performance and advanced features for gaming and other demanding applications, and based on the number of user reviews the product has on online st...