Archer Vx1800V V1
Monthly
OS command injection in the TP-Link Archer VX1800v (v1) router lets an adjacent, high-privileged attacker inject shell metacharacters through the domain name parameter of an HTTP management interface, yielding arbitrary command execution as root and full device takeover. The flaw scores CVSS 4.0 8.5 (High) and a vendor firmware patch is available; no public exploit identified at time of analysis. Note a naming discrepancy in the source data - the free-text description says 'VX800v' while the CPE and tags reference 'VX1800V' - so verify the exact affected model against the TP-Link advisory before acting.
Root-level OS command injection in the TR-069/CWMP management client of the TP-Link Archer VX1800v v1 gateway lets an attacker who controls (or has compromised) the ACS provisioning server inject unsanitized parameters that the device executes as system-level commands. Because CWMP provisioning is trusted implicitly, a malicious or hijacked ACS can push crafted values that yield arbitrary command execution as root and full device takeover. No public exploit identified at time of analysis, and the flaw was reported by TP-Link itself; a firmware fix is available.
Privilege escalation in the TP-Link Archer VX1800v v1 HTTP authentication component allows an adjacent-network authenticated user with at least low-level account privileges to inject newline (CRLF) characters into internally constructed configuration data, ultimately elevating to full administrative access on the device. Affected firmware versions are those below v6092.0 Build 260521 RC.7927n; TP-Link has released a patched firmware. No public exploit code has been identified at time of analysis, and EPSS places exploitation probability at 0.39% (32nd percentile), consistent with SSVC's 'Exploitation: none' finding.
OS command injection in the TP-Link Archer VX1800v (v1) router lets an adjacent, high-privileged attacker inject shell metacharacters through the domain name parameter of an HTTP management interface, yielding arbitrary command execution as root and full device takeover. The flaw scores CVSS 4.0 8.5 (High) and a vendor firmware patch is available; no public exploit identified at time of analysis. Note a naming discrepancy in the source data - the free-text description says 'VX800v' while the CPE and tags reference 'VX1800V' - so verify the exact affected model against the TP-Link advisory before acting.
Root-level OS command injection in the TR-069/CWMP management client of the TP-Link Archer VX1800v v1 gateway lets an attacker who controls (or has compromised) the ACS provisioning server inject unsanitized parameters that the device executes as system-level commands. Because CWMP provisioning is trusted implicitly, a malicious or hijacked ACS can push crafted values that yield arbitrary command execution as root and full device takeover. No public exploit identified at time of analysis, and the flaw was reported by TP-Link itself; a firmware fix is available.
Privilege escalation in the TP-Link Archer VX1800v v1 HTTP authentication component allows an adjacent-network authenticated user with at least low-level account privileges to inject newline (CRLF) characters into internally constructed configuration data, ultimately elevating to full administrative access on the device. Affected firmware versions are those below v6092.0 Build 260521 RC.7927n; TP-Link has released a patched firmware. No public exploit code has been identified at time of analysis, and EPSS places exploitation probability at 0.39% (32nd percentile), consistent with SSVC's 'Exploitation: none' finding.