TP-Link Archer AX53 V1.0 OpenVPN Module External Configuration Control Vulnerability Allowing Arbitrary File Read
Vulnerability
A vulnerability in the OpenVPN module of the TP-Link Archer AX53 V1.0 router, prior to version 1.7.1 Build 20260213, allows an authenticated adjacent attacker to read arbitrary files by processing a malicious configuration file. This exploitation could lead to unauthorized access to sensitive information stored on the device.
Impact
Successful exploitation of this vulnerability could result in unauthorized access to arbitrary files on the device, potentially exposing sensitive information.
Remediation
Users are advised to update to the latest firmware version, 1.7.1 Build 20260213, available on the TP-Link official website. Note that this version upgrade is irreversible.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.