Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands on the product that has pre-specified target devices and blocked URLs in parental control settings.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Archer AX3000
Vendor
TP-Link
Product
Archer AX3000
Platforms
Unknown
Default status
Unknown
Archer AX3000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Archer AX3000(JP)_V1_1.1.2 Build 20231115"
affected
Unavailable
Unavailable
Unavailable
None listed
Archer AX5400
Vendor
TP-Link
Product
Archer AX5400
Platforms
Unknown
Default status
Unknown
Archer AX5400 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Archer AX5400(JP)_V1_1.1.2 Build 20231115"
affected
Unavailable
Unavailable
Unavailable
None listed
Deco X50
Vendor
TP-Link
Product
Deco X50
Platforms
Unknown
Default status
Unknown
Deco X50 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Deco X50(JP)_V1_1.4.1 Build 20231122"
affected
Unavailable
Unavailable
Unavailable
None listed
Deco XE200
Vendor
TP-Link
Product
Deco XE200
Platforms
Unknown
Default status
Unknown
Deco XE200 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Deco XE200(JP)_V1_1.2.5 Build 20231120"
affected
Unavailable
Unavailable
Unavailable
None listed
Archer Air R5
Vendor
TP-Link
Product
Archer Air R5
Platforms
Unknown
Default status
Unknown
Archer Air R5 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Archer Air R5(JP)_V1_1.1.6 Build 20240508"