PT-2020-6642 · Tp Link · Tp-Link Tl-Wpa4220

Oriol Castejã³N · Published 2020-08-13 · Updated 2020-12-01 · CVE-2020-24297

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TP-Link TL-WPA4220 versions 2 through 4

Description The issue is related to the httpd daemon on TP-Link TL-WPA4220 devices, which fails to neutralize special elements used in an operating system command. This allows a remote authenticated user to execute arbitrary OS commands by sending a crafted POST request to the endpoint "/admin/powerline".

Recommendations For versions 2 through 4, update to the fixed version TL-WPA4220(EU) V4 201023 to resolve the issue. As a temporary workaround, consider restricting access to the "/admin/powerline" endpoint until the update is applied.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2022-02130

CVE-2020-24297

Affected Products

Tp-Link Tl-Wpa4220

References · 9

• 🔥 https://github.com/ocastejon/exploits/blob/main/cve-2020-24297/tplink-wpa4220-rce-exploit.py · Exploit
• 🔥 https://the-hyperbolic.com/posts/vulnerabilities-in-tlwpa4220 · Exploit
• https://tp-link.com/us/support/download · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-24297 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-24297 · Security Note
• https://bdu.fstec.ru/vul/2022-02130 · Security Note
• https://t.me/cvenotify/6406 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2020112414 · Note
• https://vuldb.com/?id.165094 · Note