CVE-2024-57049: Critical severity TP-Link Archer C20 vulnerability
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict or monitor inbound requests to the router’s /cgi interfaces to mitigate authentication bypass; treat unexpected requests that include a Referer: http://tplinkwifi.net as suspicious and block them at the network layer (e.g., firewall/WAF/ACL) unless explicitly required.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57049?
The severity of CVE-2024-57049 is considered to be high due to the ability to bypass authentication on the TP-Link Archer C20 router.
How do I fix CVE-2024-57049?
To fix CVE-2024-57049, update the firmware of the TP-Link Archer C20 router to a version later than V6.6_230412.
What are the consequences of CVE-2024-57049?
Exploiting CVE-2024-57049 may allow unauthorized users to access sensitive router interfaces and configurations.
Which devices are affected by CVE-2024-57049?
CVE-2024-57049 affects TP-Link Archer C20 routers running firmware version V6.6_230412 and earlier.
Is CVE-2024-57049 currently being exploited?
CVE-2024-57049 has been identified as a vulnerability, but any active exploitation details are currently not publicly disclosed.