Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Archer AX3000
Vendor
TP-Link
Product
Archer AX3000
Platforms
Unknown
Default status
Unknown
Archer AX3000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Archer AX3000(JP)_V1_1.1.2 Build 20231115"
affected
Unavailable
Unavailable
Unavailable
None listed
Archer AX5400
Vendor
TP-Link
Product
Archer AX5400
Platforms
Unknown
Default status
Unknown
Archer AX5400 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Archer AX5400(JP)_V1_1.1.2 Build 20231115"
affected
Unavailable
Unavailable
Unavailable
None listed
Archer AXE75
Vendor
TP-Link
Product
Archer AXE75
Platforms
Unknown
Default status
Unknown
Archer AXE75 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Archer AXE75(JP)_V1_231115"
affected
Unavailable
Unavailable
Unavailable
None listed
Deco X50
Vendor
TP-Link
Product
Deco X50
Platforms
Unknown
Default status
Unknown
Deco X50 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Deco X50(JP)_V1_1.4.1 Build 20231122"
affected
Unavailable
Unavailable
Unavailable
None listed
Deco XE200
Vendor
TP-Link
Product
Deco XE200
Platforms
Unknown
Default status
Unknown
Deco XE200 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Deco XE200(JP)_V1_1.2.5 Build 20231120"