TP-Link Archer AX21 Firmware vulnerabilities

6 CVEs affecting TP-Link Archer AX21 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-27359, published 2024-05-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-1389: TP-Link Archer AX-21 Command Injection Vulnerability, published 2023-03-15. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2023-05-01. EPSS: 100% chance of exploitation in the next 30 days. TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web…
CVE-2023-27359, published 2024-05-03. High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days. TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability. This vulnerability allows remote attackers to gain access to LAN-side services on affected installations of TP-Link Archer AX21…
CVE-2023-27333, published 2024-05-03. Medium severity, CVSS 6.8. EPSS: 0.7% chance of exploitation in the next 30 days. TP-Link Archer AX21 tmpServer Command 0x422 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-27332, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-27346, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-31710, published 2023-08-01. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. TP-Link Archer AX21(US)_V3_1.1.4 Build 20230219 and AX21(US)_V3.6_1.1.4 Build 20230219 are vulnerable to Buffer Overflow.