{"id":"CVE-2020-24363","kind":"vulnerability","aliases":["CVE-2020-24363"],"related":[],"title":"tp-link tl-wa855re firmware: TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a…","description":"TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.\n\nCISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","summary":"TP-Link TL-WA855RE Wi-Fi range extenders accept an unauthenticated TDDP_RESET POST request that factory-resets and reboots the device. An attacker on the same network can then set a new administrative password and take control of the device.","severity":"high","cvss":8.8,"epss":null,"exploited":true,"exploited_at":"2025-09-02T00:00:00+00:00","products":[{"name":"TP-Link TL-WA855RE","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"tp-link tl-wa855re firmware","fixed":["200731"],"affected":"< 200731","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","infrastructure","self-hosted","tp-link","wifi-extender"],"not_affected_if":["no-tl-wa855re-deployed"],"how_to_check":"Check whether a TL-WA855RE is on your network, e.g. via the device label model number or the admin web interface.","fix":"Discontinue use of the product, as the vendor reports it is end-of-life/end-of-service; replace it or follow vendor mitigation instructions if one is available.","status":"open","published_at":"2020-08-31T16:15:15+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:46:27+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"infrastructure","confidence":0.8,"triage":{"at":"2026-10-23T20:46:27Z","model":"claude-haiku-5-5","output":{"fix":"Discontinue use of the product, as the vendor reports it is end-of-life/end-of-service; replace it or follow vendor mitigation instructions if one is available.\nunknown","reach":"network","summary":"TP-Link TL-WA855RE Wi-Fi range extenders accept an unauthenticated TDDP_RESET POST request that factory-resets and reboots the device. An attacker on the same network can then set a new administrative password and take control of the device.","category":"infrastructure","who_cares":["tp-link","wifi-extender","self-hosted"],"confidence":0.8,"needs_auth":"no","worst_case":"Attacker resets the extender and sets the admin password, gaining device control.","analyst_note":"Confirm firmware fixed-version status and vendor mitigation details at the CISA KEV entry and TP-Link advisory; sources give no fixed version.","how_to_check":"Check whether a TL-WA855RE is on your network, e.g. via the device label model number or the admin web interface.\nunknown","needs_analyst":true,"not_affected_if":["no-tl-wa855re-deployed"],"user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000472,"input_tokens":2644,"output_tokens":415,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-01':188C '-2020':29A,32A '-24363':30A,33A '20200415':15A '22':187C 'accept':69B 'access':147C 'action':178C 'administr':95B,153C 'allow':18A,120C 'and/or':165C 'appli':179C 'applic':185C 'attack':21A,85B,123C,142C 'authent':112C 'bod':186C 'cisa':176C 'cloud':191C 'contain':109C 'control':99B,148C 'could':119C,158C 'critic':114C 'cve':28A,31A 'devic':17A,83B,102B 'discontinu':173C,194C 'end':161C,167C 'end-of-lif':160C 'end-of-servic':166C 'eo':170C 'eol':164C 'exploit':47B 'extend':57B,68B 'factori':78B,137C 'factory-reset':77B 'fi':66B 'firmwar':7A 'firmware':46A 'follow':184C 'function':115C 'guidanc':189C 'host':51B 'impact':156C 'incorrect':146C 'infrastructur':48B 'instruct':183C 'life':163C 'link':3A,10A,36A,42A,54B,60B,105C 'miss':111C 'mitig':180C,200C 'network':25A,89B,127C 'new':94B,152C 'obtain':145C 'password':96B,154C 'per':181C 'post':74B,133C 'product':157C,174C,198C 'rang':67B 'reboot':81B,140C 'rel37464':16A 'request':75B,134C 'requir':177C 'reset':73B,79B,132C,138C 'self':50B 'self-host':49B 'servic':169C,192C 'set':92B,150C 'submit':27A,129C 'take':98B 'tddp':72B,131C 'tl':5A,12A,38A,44A,62B,107C 'tl-wa855re':4A,11A,37A,43A,61B,106C 'tp':2A,9A,35A,41A,53B,59B,104C 'tp-link':1A,8A,34A,40A,52B,58B,103C 'unauthent':20A,71B,122C 'unavail':202C 'use':195C 'user':171C 'util':175C 'v5':14A 'vendor':182C 'vulner':116C,118C 'wa855re':6A,13A,39A,45A,63B,108C 'wi':65B 'wi-fi':64B 'wifi':56B 'wifi-extend':55B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2020-08-31T16:15:15+00:00","kev":{"dateAdded":"2025-09-02","dueDate":"2025-09-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2020-24363","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-24363","severity":null,"published_at":"2025-09-02T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T20:35:32+00:00","note":null},{"source":"nvd","external_id":"CVE-2020-24363","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24363","severity":null,"published_at":"2020-08-31T16:15:15+00:00","modified_at":"2026-06-17T03:05:25+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}