Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

18 records

Priority MEDIUM 41

An OS command injection vulnerability in the dnsmasq module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute arbitrary code when a specially crafted configuration file is processed due to…

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.01292 Published 2026-04-08 Fixed in 1.7.1 Build 20260213 CWE-78
Priority LOW 30

An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed.

CVSS 4.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.0036 Published 2026-04-08 Fixed in 1.7.1 Build 20260213 CWE-15
Priority LOW 30

An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is processed.

CVSS 4.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.003 Published 2026-04-08 Fixed in 1.7.1 Build 20260213 CWE-15
Priority MEDIUM 42

An OS command injection vulnerability in the OpenVPN module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to execute system commands when a specially crafted configuration file is processed due to…

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.01645 Published 2026-04-08 Fixed in 1.7.1 Build 20260213 CWE-78
Priority LOW 34

A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via a specially crafted c…

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.00438 Published 2026-04-08 Fixed in 1.7.1 Build 20260213 CWE-121
Priority LOW 37

This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes t…

CVSS 4.0HIGH 7.7 Adjacent network No auth No interaction EPSS 0.00638 Published 2026-03-20 Fixed in 251029, (US)_1.2.1 Build 20260527 CWE-121
Priority LOW 38

A command injection vulnerability on AX53 v1 occurs in mscd debug functionality due to insufficient input handling, allowing log redirection to arbitrary files and concatenation of unvalidated file content into shell com…

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.01941 Published 2026-03-20 Fixed in 251029 CWE-77
Priority MEDIUM 40

Heap-based Buffer Overflow vulnerability in Archer AX53 v1.0 and AX12 v1.0 (tdpserver modules) allows adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted network…

CVSS 4.0HIGH 8.6 Adjacent network Low privileges No interaction EPSS 0.00537 Published 2026-02-03 Fixed in 1.5.1 Build 20260721 CWE-122
Priority LOW 34

SSH Hostkey misconfiguration vulnerability in Archer AX53 and Archer BE3600 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) attack.

CVSS 4.0HIGH 7.0 Adjacent network Low privileges User interaction EPSS 0.00546 Published 2026-02-03 Fixed in (KR)_1.2.2 Build 20260903 CWE-322
Priority LOW 35

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted…

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.00501 Published 2026-02-03 No fix listed CWE-122
Priority LOW 35

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted…

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.00501 Published 2026-02-03 No fix listed CWE-122
Priority LOW 35

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted…

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.00501 Published 2026-02-03 No fix listed CWE-122
Priority LOW 34

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted…

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.00464 Published 2026-02-03 No fix listed CWE-122
Priority LOW 34

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code.

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.00464 Published 2026-02-03 No fix listed CWE-122
Priority LOW 34

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted…

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.00464 Published 2026-02-03 No fix listed CWE-122
Priority LOW 34

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted…

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.00464 Published 2026-02-03 No fix listed CWE-122
Priority LOW 34

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted…

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.00464 Published 2026-02-03 No fix listed CWE-122
Priority HIGH 67

Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot w…

CVSS 4.0HIGH 7.2 Adjacent network No auth No interaction EPSS 0.00429 Published 2026-01-21 Fixed in V6_251031, V1_251215 +3 CWE-290