description: Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX3000 firmware versions prior to "Archer AX3000(JP)_V1_1.1.2 Build 20231115", Archer AX5400 firmware versions prior to "Archer AX5400(JP)_V1_1.1.2 Build 20231115", and Archer AXE75 firmware versions prior to "Archer AXE75(JP)_V1_231115".
problem types: OS command injection
affected:
{
vendor: TP-Link
product: Archer AX3000
versions:
version: firmware versions prior to "Archer AX3000(JP)_V1_1.1.2 Build 20231115", status: affected
}
{
vendor: TP-Link
product: Archer AX5400
versions:
version: firmware versions prior to "Archer AX5400(JP)_V1_1.1.2 Build 20231115", status: affected
}
{
vendor: TP-Link
product: Archer AXE75
versions:
version: firmware versions prior to "Archer AXE75(JP)_V1_231115", status: affected
}
