CVE-2024-57514 Scanner
CVE-2024-57514 Scanner - Cross-Site Scripting (XSS) vulnerability in TP-Link Archer A20 v3 Router
Used 2.4k times · 3.4k assets checked · url
CVE
CVE-2024-57514
4.8
CVSSmedium
Exploitable from an adjacent network · low-privilege account sufficient · user interaction needed.
Description
The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL. This allows the attacker to inject malicious code into the page, executing JavaScript on the victim's browser, which could then be used for further malicious actions. The vulnerability was identified in the 1.0.6 Build 20231011 rel.85717(5553) version.
Attack Vector
Adjacent
Privileges Req.
Low
User Interaction
Required
Updated Sep 28, 2026View on NVD →
S4E scanner
Monitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →