Multiple TP-LINK products allow a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by restoring a crafted backup file. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Archer AX3000
Vendor
TP-LINK
Product
Archer AX3000
Platforms
Unknown
Default status
Unknown
Archer AX3000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Archer AX3000(JP)_V1_1.1.3 Build 20240415"
affected
Unavailable
Unavailable
Unavailable
None listed
Archer AXE75
Vendor
TP-LINK
Product
Archer AXE75
Platforms
Unknown
Default status
Unknown
Archer AXE75 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Archer AXE75(JP)_V1_1.2.0 Build 20240320"
affected
Unavailable
Unavailable
Unavailable
None listed
Archer AX5400
Vendor
TP-LINK
Product
Archer AX5400
Platforms
Unknown
Default status
Unknown
Archer AX5400 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Archer AX5400(JP)_V1_1.1.4 Build 20240429"
affected
Unavailable
Unavailable
Unavailable
None listed
Archer Air R5
Vendor
TP-LINK
Product
Archer Air R5
Platforms
Unknown
Default status
Unknown
Archer Air R5 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Archer Air R5(JP)_V1_1.1.6 Build 20240508"
affected
Unavailable
Unavailable
Unavailable
None listed
Archer AXE5400
Vendor
TP-LINK
Product
Archer AXE5400
Platforms
Unknown
Default status
Unknown
Archer AXE5400 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware versions prior to "Archer AXE5400(JP)_V1_1.0.3 Build 20240319"