TP-Link Archer AX50 Firmware vulnerabilities

3 CVEs affecting TP-Link Archer AX50 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-2188, published 2024-03-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-30075, published 2022-06-09. High severity, CVSS 8.8. EPSS: 34.6% chance of exploitation in the next 30 days. In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation.
CVE-2024-2188, published 2024-03-05. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Cross-Site Scripting (XSS) vulnerability stored in TP-Link Archer AX50 affecting firmware version 1.0.11 build 2022052. This vulnerability could allow an unauthenticated attacker to create a port…
CVE-2023-40357, published 2023-09-06. High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer…