Exploitation Summary
CVE-2020-24363 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added September 2, 2025. EIP tracks 1 public exploit from researchers including malwrforensics.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in TP-Link TL-WA855RE V5_200415, allowing an unauthenticated attacker on the same network to reset the device to factory settings via a crafted POST request using the TDDP_RESET code (5).
Description
TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password.
Exploits (1)
This exploit demonstrates an authentication bypass vulnerability in TP-Link TL-WA855RE V5_200415, allowing an unauthenticated attacker on the same network to reset the device to factory settings via a crafted POST request using the TDDP_RESET code (5).
References (4)
Scores
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H