TP-Link Archer Series Command Injection Vulnerability in Modem Management CLI

A command injection vulnerability has been identified in the TP-Link Archer NX200, NX210, NX500, and NX600 routers. This vulnerability arises from improper input handling in a modem-management administrative command line interface (CLI) command. An authenticated attacker with administrative privileges can exploit this vulnerability to execute arbitrary operating system commands, potentially affecting the device's functionality and security.

Impact

Exploitation of this vulnerability allows authenticated attackers with administrative rights to execute arbitrary commands on the affected device's operating system.

Remediation

Users are advised to update to the latest firmware version. The latest firmware for each affected model can be downloaded from the TP-Link support website.