CVE-2024-57514

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL. This allows the attacker to inject malicious code into the page, executing JavaScript on the victim's browser, which could then be used for further malicious actions. The vulnerability was identified in the 1.0.6 Build 20231011 rel.85717(5553) version.

CVSS v3 4.8 MEDIUM

4.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.7 / Impact : 2.7

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://www.zyenra.com/blog/xss-in-tplink-archer-a20.html
https://www.zyenra.com/blog/xss-in-tplink-archer-a20.html

Configurations

No configuration.

History

No history.

Information

Published : 2025-01-28 22:15

Updated : 2026-06-17 08:13

NVD link : CVE-2024-57514

Mitre link : CVE-2024-57514

CVE.ORG link : CVE-2024-57514

JSON object : View

Products Affected

No product.

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2024-57514", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-57514", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-01-29T14:56:30.499638Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 1.7}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-01-28T22:15:16.103", "references": [{"url": "https://www.zyenra.com/blog/xss-in-tplink-archer-a20.html", "source": "cve@mitre.org"}, {"url": "https://www.zyenra.com/blog/xss-in-tplink-archer-a20.html", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL. This allows the attacker to inject malicious code into the page, executing JavaScript on the victim's browser, which could then be used for further malicious actions. The vulnerability was identified in the 1.0.6 Build 20231011 rel.85717(5553) version."}, {"lang": "es", "value": "El TP-Link Archer A20 v3 router es vulnerable a Cross-site Scripting (XSS) debido a la gesti\u00f3n inadecuada de las rutas de listado de directorios en la interfaz web. Cuando se visita una URL manipulado especial, la p\u00e1gina web del router muestra el listado de directorios y ejecuta JavaScript arbitrario incrustado en la URL. Esto permite al atacante inyectar c\u00f3digo malicioso en la p\u00e1gina, ejecutando JavaScript en el navegador de la v\u00edctima, que luego podr\u00eda usarse para otras acciones maliciosas. La vulnerabilidad se identific\u00f3 en la versi\u00f3n 1.0.6 Build 20231011 rel.85717(5553)."}], "lastModified": "2026-06-17T08:13:39.050", "sourceIdentifier": "cve@mitre.org"}