TP-Link TL-WA855RE Firmware vulnerabilities

2 CVEs affecting TP-Link TL-WA855RE Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-24363, published 2020-08-31.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-24363: TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability, published 2020-08-31. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2025-09-02. EPSS: 22.2% chance of exploitation in the next 30 days. TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then…
• CVE-2020-10916, published 2020-05-07. High severity, CVSS 8.0. EPSS: 1.1% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of TP-Link TL-WA855RE Firmware Ver: 855rev4-up-ver1-0-1-P1[20191213-rel60361] Wi-Fi extenders.…