CVE-2024-54127: Exposure of Wi-Fi Credentials in Plaintext in TP-Link Archer C50
This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could allow the attacker to obtain Wi-Fi credentials of the targeted system.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54127?
CVE-2024-54127 is considered a high severity vulnerability due to the potential for physical access exploitation.
How do I fix CVE-2024-54127?
To fix CVE-2024-54127, ensure that physical access to the TP-Link Archer C50 device is restricted and consider implementing stricter access controls.
Who is affected by CVE-2024-54127?
The TP-Link Archer C50 router is specifically affected by CVE-2024-54127 due to its unsecured terminal access.
What are the potential impacts of CVE-2024-54127?
The potential impacts of CVE-2024-54127 include unauthorized access to device settings and data compromise.
Can CVE-2024-54127 be exploited remotely?
No, CVE-2024-54127 requires physical access to the device to exploit the vulnerability.