CVE-2020-24297

PoC —

CVSS 3.1

8.8 high

EPSS

4%p89

Published

Nov 18, 2020 (Nov 18, 2020)

Modified

Jun 17, 2026

Description

httpd on TP-Link TL-WPA4220 devices (versions 2 through 4) allows remote authenticated users to execute arbitrary OS commands by sending crafted POST requests to the endpoint /admin/powerline. Fixed version: TL-WPA4220(EU)_V4_201023

Vendors: tp-link
Products: tl-wpa4220 firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.7%)

In the news0 stories

No ingested article mentions this CVE yet.