Read the docs
TI-2026-17838 Aliases CVE-2026-22228GHSA-qh7q-x454-phcx

Improper Input Validation Leading to DoS on TP-Link Archer BE230

Priority LOW 30CWE-400Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-400.

Summary

An authenticated user with high privileges may trigger a denial‑of‑service condition in TP-Link Archer BE230 v1.2 by restoring a crafted configuration file containing an excessively long parameter. Restoring such a file can cause the device to become unresponsive, requiring a reboot to restore normal operation. This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00388 33rd percentileScored 2026-11-07
Fix Fixed Archer BE230 v1.2 (TP-Link Systems Inc.): 1.2.4 Build 20251218 rel.70420

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TP-LinkArcher BE230 v1.2before 1.2.4 Build 20251218 rel.704201.2.4 Build 20251218 rel.70420Patch availableCNA
  • Archer BE230 v1.2 VendorTP-Link Affected before 1.2.4 Build 20251218 rel.70420 Fixed in 1.2.4 Build 20251218 rel.70420 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:tp-link:archer_be230_firmware:*:*:*:*:*:*:*:*before 1.2.4VulnerableTP-Link
cpe:2.3:h:tp-link:archer_be230:1.20:*:*:*:*:*:*:*1.20Running onTP-Link
  • cpe:2.3:o:tp-link:archer_be230_firmware:*:*:*:*:*:*:*:* Versions before 1.2.4 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:archer_be230:1.20:*:*:*:*:*:*:* Versions 1.20 Running on ·TP-Link

Remediation

  • Fix · CNA Archer BE230 v1.2 (TP-Link Systems Inc.) Fixed in 1.2.4 Build 20251218 rel.70420

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    TP-Link Systems Archer BE230 v1.2 — tp-link.com/us/support/faq/4941

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2026-17830 Improper Input Validation Leading to DoS on TP-Link Archer BE230Priority LOW 30
    Show all 2 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-22228
  2. 2026-10-03 Alias added: GHSA-qh7q-x454-phcx

References

Patch 3

Advisory 1

  • TI-2026-17837 Command Injection Vulnerability on TP-Link Archer BE230 v1.2 CVSS 4.0HIGH 8.5
  • TI-2026-17836 Command Injection Vulnerability on TP-Link Archer BE230 and AX73 CVSS 4.0HIGH 8.5
  • TI-2026-17835 Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and AXE75 v1.0 CVSS 4.0HIGH 8.5
  • TI-2026-17834 Command Injection Vulnerability on TP-Link Archer BE230 v1.2 CVSS 4.0HIGH 8.5
  • TI-2026-17839 Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and Deco BE25 v1.0 CVSS 4.0HIGH 8.6
  • TI-2026-17833 Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1 CVSS 4.0HIGH 8.5
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences