Vhash

An OS Command Injection issue exists in TP-Link Archer BE230 devices. A nearby, authenticated attacker can execute arbitrary code. Successful exploitation could grant an attacker full administrative control, compromising configuration integrity, network security, and service availability. This vulnerability affects web modules within the device.

A command injection issue exists following administrator authentication within the VPN server configuration module. Successful exploitation could grant an attacker complete administrative control over the device, potentially compromising configuration integrity, network security, and service availability. The issue affects multiple code paths, each tracked under a unique identifier. The vulnerability is triggered in the VPN server configuration module.