TP-Link Tl-WDR5620 Firmware vulnerabilities

2 CVEs affecting TP-Link Tl-WDR5620 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-46486, published 2024-10-04.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-6487, published 2019-01-18. High severity, CVSS 8.8. EPSS: 8.5% chance of exploitation in the next 30 days. TP-Link WDR Series devices through firmware v3 (such as TL-WDR5620 V3.0) are affected by command injection (after login) leading to remote code execution, because shell metacharacters can be included…
• CVE-2024-46486, published 2024-10-04. High severity, CVSS 8.0. EPSS: 0.8% chance of exploitation in the next 30 days. TP-LINK TL-WDR5620 v2.3 was discovered to contain a remote code execution (RCE) vulnerability via the httpProcDataSrv function.