TP-LINK Archer AX50/A10 Command Execution Vulnerability

The TP-LINK Archer is a series of routers from China P&L (TP-LINK). A command execution vulnerability exists in firmware versions prior to TP-LINK Archer AX50(JP)_V1_230529, Archer A10(JP)_V2_230504, which stems from an application failing to correctly filter constructed command special characters, commands, and more. An authenticated attacker could exploit this vulnerability to execute arbitrary operating system commands.