CVE-2024-54127: Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50
First published: Thu Dec 05 2024(Updated: )
This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could allow the attacker to obtain Wi-Fi credentials of the targeted system.
Credit: vdisclose@cert-in.org.in
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TP-Link Archer C50 V3 |
Remedy
Upgrade to Archer C50(EU)_V4_ 240917 https://static.tp-link.com/upload/firmware/2024/202411/20241125/Archer%20C50(EU)_V4_240917.zip
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-54127?
CVE-2024-54127 is considered a high severity vulnerability due to the potential for physical access exploitation.
How do I fix CVE-2024-54127?
To fix CVE-2024-54127, ensure that physical access to the TP-Link Archer C50 device is restricted and consider implementing stricter access controls.
Who is affected by CVE-2024-54127?
The TP-Link Archer C50 router is specifically affected by CVE-2024-54127 due to its unsecured terminal access.
What are the potential impacts of CVE-2024-54127?
The potential impacts of CVE-2024-54127 include unauthorized access to device settings and data compromise.
Can CVE-2024-54127 be exploited remotely?
No, CVE-2024-54127 requires physical access to the device to exploit the vulnerability.
- agent/remedy
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/severity
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/tp-link
- canonical/tp-link archer c50 v3