cve/2024/CVE-2024-57357.md

### [CVE-2024-57357](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57357)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)

### Description

An issue in TPLINK TL-WPA 8630 TL-WPA8630(US)_V2_2.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub_4256CC, which allows command injection by injecting 'devpwd'.

### POC

#### Reference
- https://github.com/c10uds/tplink-wpa8630-rce-vulnerability

#### Github
- https://github.com/c10uds/tplink-wpa8630-rce-vulnerability
- https://github.com/kristofer84/wpa8630-exploit-test