CVE-2020-24297

HIGH · CVSS 8.8 EPSS 3.61%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-11-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-24297

Severity

HIGH

CVSS

8.8

EPSS

3.61%

Original NVD Description

httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests to the endpoint /admin/powerline. Fixed version: TL-WPA4220(EU)_V4_201023