TP-Link Archer RE605X Backup Restore Function Command Injection Vulnerability Allowing Root Execution

A vulnerability exists in the TP-Link Archer RE605X V3 backup restore function, which fails to properly validate unexpected or unrecognized tags in backup files. This oversight allows crafted files to inject tags that are interpreted by a shell, enabling the execution of arbitrary commands with root privileges. The flaw arises from insufficient validation of backup file contents, creating a vector for command injection attacks.

Impact

Exploitation of this vulnerability leads to unauthorized root-level command execution on the affected device.

Remediation

Users are advised to update to the latest firmware version. The patched firmware can be downloaded from the TP-Link official website, ensuring to select the correct regional site and hardware version.