Medium severity6.8NVD Advisory· Published Jul 4, 2024· Updated Jun 17, 2026

CVE-2024-38471

Description

Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TP-Link/Archer AXE5400llm-create
TP-Link/Archer AX3000llm-fuzzy
TP-Link/Archer AX5400llm-fuzzy
TP-Link/Archer Air R5llm-fuzzy
TP-Link/Tp Linkllm-fuzzy
TP-Link/Archer AXE75 V1llm-fuzzy

Patches

Vulnerability mechanics

References

jvn.jp/en/vu/JVNVU99784493/nvd
www.tp-link.com/jp/support/download/nvd
www.tp-link.com/jp/support/download/archer-air-r5/v1/nvd
www.tp-link.com/jp/support/download/archer-ax3000/nvd
www.tp-link.com/jp/support/download/archer-ax5400/nvd
www.tp-link.com/jp/support/download/archer-axe5400/nvd
www.tp-link.com/jp/support/download/archer-axe75/nvd

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000