CVE-2021-42232

Name of the Vulnerable Software and Affected Versions TP-Link Archer A7 version Archer A7(US) V5 210519

Description The issue is caused by a command injection vulnerability in the /usr/bin/tddp program, which takes part of the received data packet as part of the command. This allows an attacker to execute arbitrary commands on the router.

Recommendations For TP-Link Archer A7 version Archer A7(US) V5 210519, consider disabling the /usr/bin/tddp program until a patch is available to prevent exploitation of the command injection vulnerability.