CVE-2024-57049

Name of the Vulnerable Software and Affected Versions TP-Link Archer c20 versions prior to V6.6 230412

Description An authentication bypass exists in the firmware of the router. A remote attacker can bypass security restrictions for certain interfaces located in the /cgi directory by adding the Referer parameter with the value http://tplinkwifi.net to the request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.