Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX3000 firmware versions prior to “Archer AX3000(JP)_V1_1.1.2 Build 20231115”, Archer AX5400 firmware versions prior to “Archer AX5400(JP)_V1_1.1.2 Build 20231115”, and Archer AXE75 firmware versions prior to “Archer AXE75(JP)_V1_231115”.
CPE | Name | Operator | Version |
---|---|---|---|
archer_ax3000_firmware | lt | 1.1.2 | |
archer_ax5400_firmware | lt | 1.1.2 | |
archer_axe75_firmware | lt | 1.1.9 |