Tp-Link Archer Ax3000 Firmware vulnerabilities

CVE-2024-21833 [HIGH] CWE-78 CVE-2024-21833: Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the produ Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.

CVE-2024-21773 [HIGH] CWE-78 CVE-2024-21773: Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the produ Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands on the product that has pre-specified target devices and blocked URLs in parental control settings.

CVE-2024-21821 [HIGH] CWE-78 CVE-2024-21821: Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands.