CVE-2024-21827

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-21827
A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.57421. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.

7.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1947 Exploit Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1947 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tp-link:er7206_firmware:1.4.1:build_20240117_rel_57421:*:*:*:*:*:*
cpe:2.3:h:tp-link:er7206:-:*:*:*:*:*:*:*
History

05 Sep 2025, 15:50

Type Values Removed Values Added
First Time Tp-link er7206 Firmware
Tp-link
Tp-link er7206
CPE cpe:2.3:h:tp-link:er7206:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:er7206_firmware:1.4.1:build_20240117_rel_57421:*:*:*:*:*:*
References () https://talosintelligence.com/vulnerability_reports/TALOS-2024-1947 - () https://talosintelligence.com/vulnerability_reports/TALOS-2024-1947 - Exploit, Third Party Advisory

21 Nov 2024, 08:55

Type Values Removed Values Added
Summary
  • (es) Existe una vulnerabilidad de código de depuración sobrante en la funcionalidad de depuración cli_server del enrutador VPN Tp-Link ER7206 Omada Gigabit 1.4.1 Build 20240117 Rel.57421. Una serie de solicitudes de red especialmente manipuladas pueden provocar la ejecución de comandos arbitrarios. Un atacante puede enviar una secuencia de solicitudes para desencadenar esta vulnerabilidad.
References () https://talosintelligence.com/vulnerability_reports/TALOS-2024-1947 - () https://talosintelligence.com/vulnerability_reports/TALOS-2024-1947 -

25 Jun 2024, 17:15

Type Values Removed Values Added
References
  • {'url': 'https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1947', 'source': 'talos-cna@cisco.com'}

25 Jun 2024, 15:15

Type Values Removed Values Added
References
  • () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1947 -

25 Jun 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-25 14:15

Updated : 2025-09-05 15:50

NVD link : CVE-2024-21827

Mitre link : CVE-2024-21827

CVE.ORG link : CVE-2024-21827

JSON object : View

Products Affected

tp-link

  • er7206
  • er7206_firmware
CWE
CWE-489

Active Debug Code