Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

TP-Link TL-WA855RE actively exploited missing authentication flaw (CVE-2020-24363)

Vulnerability
First reported
Last updated
Happening score
H score 19
2 unique sources, 2 articles

Summary

Hide ▲

CISA added CVE-2020-24363 affecting TP-Link TL-WA855RE Wi-Fi Ranger Extender products to the KEV catalog after evidence of active exploitation. The flaw is a missing authentication issue that can let an attacker on the same network reset the device and take control. A fixed firmware build exists, but the product's end-of-life status limits the chance of future updates.

Related Happenings

Digiever DS-2105 Pro active exploitation wave (CVE-2023-52163)

Exploitation Wave
H score39 First: 25.12.2025 10:07 Last: 25.12.2025 10:07 Sources 1

About this happening: CVE-2023-52163 is being exploited at scale against Digiever DS-2105 Pro NVRs, with multiple reports linking abuse to Mirai and ShadowV2 botnet delivery. The flaw i...

Open Happening

CISA KEV addition for Sierra Wireless ALEOS routers

Public Sector Action
H score33 First: 13.12.2025 14:33 Last: 13.12.2025 14:33 Sources 1

About this happening: CISA added CVE-2018-4063 to its KEV catalog, putting Sierra Wireless AirLink ALEOS routers under federal remediation pressure after reports of active exploitatio...

Open Happening

D-Link DIR-878 end-of-life replacement advisory

Advisory/Mitigation
H score25 First: 20.11.2025 17:38 Last: 20.11.2025 17:38 Sources 1

About this happening: D-Link told users of the DIR-878 router to move off the device because it reached end-of-life in 2021 and will receive no further security updates. The mitigation...

Open Happening

CISA KEV catalog update for TP-Link router flaws

Public Sector Action
H score35 First: 04.09.2025 13:03 Last: 04.09.2025 13:03 Sources 1

About this happening: CISA added CVE-2023-50224 and CVE-2025-9377 to the KEV catalog, forcing FCEB agencies to prioritize mitigation for TP-Link wireless routers by September 24,...

Open Happening

CISA remediation directive for CVE-2020-24363

Advisory/Mitigation
H score32 First: 03.09.2025 21:56 Last: 03.09.2025 21:56 Sources 1

How related: On Tuesday, CISA added CVE-2020-24363 to its Known Exploited Vulnerabilities (KEV) catalog along with the recently disclosed WhatsApp zero-day, urging federal agencies to address both by September 23.

About this happening: CISA ordered federal agencies to address CVE-2020-24363 by September 23, extending a remediation deadline for a TP-Link TL-WA855RE flaw that has been exploited...

Open Happening

Timeline

  1. 03.09.2025 08:09 2 articles · 10mo ago

    CISA adds TP-Link TL-WA855RE CVE-2020-24363 to KEV catalog

    Industry Or Public Sector Update

    CISA added CVE-2020-24363 affecting TP-Link TL-WA855RE Wi-Fi Ranger Extender devices to its Known Exploited Vulnerabilities catalog after evidence of active exploitation. The flaw is a missing authentication issue that can let an attacker on the same network submit a TDDP_RESET POST request, factory reset and reboot the device, and then set a new administrative password to gain elevated access. A fixed firmware build, TL-WA855RE(EU)_V5_200731, exists, but the product is end-of-life.

    Show sources
    Open in new tab