PT-2026-5691 · Tp Link · Archer Be230
CVE-2026-22227
·
Publicado
2025-12-19
·
Atualizado
2026-02-02
CVSS v4.0
8.5
Alta
| Vetor | AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L |
Name of the Vulnerable Software and Affected Versions
TP-Link Archer BE230 versions prior to 1.2.4 Build 20251218 rel.70420
Description
A command injection may occur after administrative authentication through the configuration backup restoration function. Successful exploitation could grant an attacker full administrative control, compromising configuration integrity, network security, and service availability. This issue is one of several distinct command injection flaws identified in separate code paths. The vulnerability is triggered via the configuration backup restoration function.
Recommendations
Update to version 1.2.4 Build 20251218 rel.70420 or later.
Correção
OS Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Archer Be230