Unscored CVE-2023-40531 EUVD-2023-45102GHSA-rf5m-797p-8rc8

Archer AX6000 firmware versions prior to 'Archer AX6000(JP)_V1_1.3.0 Build 20221208' allows a network-adjacent authenticated attacker to ex…

Published Sep 6, 2023 · Updated Sep 26, 2024 · Assigned by jpcert

Vendor: TP-Link Systems Product: Archer AX6000 Category: Network devices

Description

Archer AX6000 firmware versions prior to 'Archer AX6000(JP)_V1_1.3.0 Build 20221208' allows a network-adjacent authenticated attacker to execute arbitrary OS commands.

Affected products

Vendor	Product	Affected	Fixed
TP-LINK	Archer AX6000	firmware versions prior to 'Archer AX6000(JP)_V1_1.3.0 Build 20221208'	—

References

https://www.tp-link.com/jp/support/download/archer-ax6000/v1/#Firmware
https://jvn.jp/en/vu/JVNVU99392903/