Secuno
ENNL
Book demo

CVE-2020-24363

TP-link TL-WA855RE Missing Authentication for Critical Function

8.8 HIGHActively exploited (CISA KEV)EPSS 20.7%
  1. Published31 Aug 2020
  2. Added to CISA KEV2 Sept 2025
  3. Remediation due23 Sept 2025
Actively exploited (CISA KEV)

TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Added to KEV: 2 Sept 2025Federal remediation due: 23 Sept 2025

Description

TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password.

CVSS 3.1 breakdown

Attack vectorAdjacent
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

TP-Link Tl-wa855re Firmware< 200731

Remediation

Fixed in
TP-Link Tl-wa855re Firmware≥ 200731

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-876899.8
The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store…
CVE-2026-843138.8
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, POST…
CVE-2026-1095759.8
In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition…
CVE-2026-571189.8
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59,…
CVE-2026-1093718.2
ZITADEL 3.0.0 before 4.18.0 contains a missing authentication vulnerability in the…
CVE-2026-1085498.1
cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX…

Frequently asked

Is CVE-2020-24363 being actively exploited?

Yes. CVE-2020-24363 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 2 Sept 2025.

How severe is CVE-2020-24363?

CVE-2020-24363 has a CVSS 3.1 base score of 8.8, rated high. EPSS estimates a 20.7% probability of exploitation.

Which products are affected by CVE-2020-24363?

Affected products include TP-Link Tl-wa855re Firmware.

How do I fix CVE-2020-24363?

Upgrade affected software to a fixed version, for example TP-Link Tl-wa855re Firmware 200731 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2020-24363 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, Secuno flags any affected asset as top-priority automatically. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.