Version firmware versions prior to "Deco XE200(JP)_V1_1.2.5 Build 20231120"
OTHER
2 CVEs
Known Vulnerabilities
CVE-2024-21833
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.
UNKNOWN
Published Jan 10, 2024
CVE-2024-21773
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands on the product that has pre-specified target devices and blocked URLs in parental control settings.
UNKNOWN
Published Jan 10, 2024