TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability

HIGH 8.8EXPLOITED (CISA KEV)CVE-2020-24363 · Published 31/08/2020 · updated 17/06/2026

TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 02/09/2025. Patch affected systems as an emergency.

In short

CVE-2020-24363 is a HIGH (CVSS 8.8) vulnerability.
Exploited in the wild: CISA added it to the KEV catalog on 02/09/2025.
Chance of exploitation in the next 30 days (EPSS): 22.2%, higher than 97.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
TL-WA855RE TP-Link	Versions not published yet (product named by CISA KEV)

Description

TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password.

References

malwrforensics.com/en/2020/08/31/cve-2020-24363-tl-wa855re-v5-advisory · Third Party Advisory
pastebin.com/VjHM4UiA · Third Party Advisory
tp-link.com/us/support/download/tl-wa855re · Product
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2020-24363

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free