Archer BE3600 v1 vulnerabilities
6 known vulnerabilities in Archer BE3600 v1 from TP-Link. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.5 High severity
Archer BE3600 v1: Improper Neutralization of Special Elements used in an OS Command
A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processe
- 8.7 High severity
Archer BE800 V1: Improper Neutralization of Special Elements used in an OS Command
An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inj
- 8.1 High severity
Archer AX53 v1.0: Key Exchange without Entity Authentication
SSH Hostkey misconfiguration vulnerability in Archer AX53 and Archer BE3600 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) attack. This could enable unauthorized access if captured credent
- 8.0 High severity
Archer BE230 v1.2: Improper Neutralization of Special Elements used in an OS Command
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and BE3600 v1 (vpn modules) allows adjacent authenticated attacker execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, res
- 8.0 High severity
Archer BE230 v1.2: Improper Neutralization of Special Elements used in an OS Command
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and BE3600 v1 allows adjacent authenticated attacker execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resu
- 8.0 High severity
Archer BE230 v1.2: Improper Neutralization of Special Elements used in an OS Command
An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE3600v1, AX10 v3 and AXE75 v1, allowing an adjacent authenticated attacker to execute arbitrary code. Successful exploitation could allow an at