CVE-2024-54127

mediumpriority · track · 0OT risk · elevatedEPSS 0.002 · 5 %ileEURU

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.16% (5th) EPSS

CVSS 4.8 · medium

Is it mine?

2 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

EPSS · scored 2026-10-29

This vulnerability exists in the TP-Link Archer C50 due to presence of terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the UART shell on the vulnerable device. Successful exploitation of this vulnerability could allow the attacker to obtain Wi-Fi credentials of the targeted system.

cvss

Technical severity, 0–10. One row per scoring source.

4.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 0.7–4.8

v3.14.8mediumAV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Lsecondary · FSTEC (BDU) RU

v4.04.3mediumCVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.04.3mediumCVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · vdisclose@cert-in.org.in

v4.00.7lowCVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)