Skip to content
OpenAdvisories
High · 8.0 CVE-2025-32107 EUVD-2025-10782GHSA-hp5p-6r7w-jfxx

OS command injection vulnerability exists in Deco BE65 Pro firmware versions prior to "Deco BE65 Pro(JP)_V1_1.1.2 Build 20250123". If this …

Published Apr 11, 2025 · Updated Apr 11, 2025 · Assigned by jpcert

Vendor: TP-Link Systems Product: Deco BE65 Pro Category: Network devices

Description

OS command injection vulnerability exists in Deco BE65 Pro firmware versions prior to "Deco BE65 Pro(JP)_V1_1.1.2 Build 20250123". If this vulnerability is exploited, an arbitrary OS command may be executed by the user who can log in to the device.

Affected products

VendorProductAffectedFixed
TP-Link Corporation Deco BE65 Pro firmware versions prior to "Deco BE65 Pro(JP)_V1_1.1.2 Build 20250123" —

References