Archer Axe75 Firmware vulnerabilities
6 known vulnerabilities in Archer Axe75 Firmware from TP-Link. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.0 High severity
AXE75 V1: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file
- 8.0 High severity
Archer AXE75 v1.6/v1.0: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router. An authenticated attacker with adjacent-network access may be able to perform remote code execution (RCE) when the router is configured with sysmode=ap. Succes
- 7.3 High severity
Improper Input Validation vulnerability in TP-Link Archer AXE75 v1.6 (vpn modules) allows an…
Improper Input Validation vulnerability in TP-Link Archer AXE75 v1.6 (vpn modules) allows an authenticated adjacent attacker to delete arbitrary server file, leading to possible loss of critical system files and service interruption or degraded functionality.T
- 8.0 High severity
archer_axe75_firmware: Improper Neutralization of Special Elements used in an OS Command
An Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmp_get_sites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the
- 8.8 High severity
Archer AX3000: Improper Neutralization of Special Elements used in an OS Command
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.
- 8.0 High severity
Archer AX3000: Improper Neutralization of Special Elements used in an OS Command
Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands.