CVE-2024-53375

Name of the Vulnerable Software and Affected Versions: TP-Link Archer series (affected versions not specified) TP-Link Deco Series (affected versions not specified) TP-Link Tapo Series (affected versions not specified)

Description: An Authenticated Remote Code Execution (RCE) vulnerability exists in the

tmp get sites

function of the HomeShield functionality provided by TP-Link. This vulnerability allows a remote attacker to execute arbitrary commands. The issue is still exploitable without the activation of the HomeShield functionality.

Recommendations: As a temporary workaround, consider disabling the

tmp get sites

function until a patch is available. Restrict access to the HomeShield functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.