Severity
Medium
Analysis Summary
CVE-2022-30075
TP-Link Archer AX50 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a flaw in the backup and restore functionality. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Impact
- Code Execution
Indicators Of Compromise
CVE
- CVE-2022-30075
Affected Vendors
TP-Link
Affected Products
TP-Link Archer AX50
Remediation
Upgrade to the latest version of Archer AX50 firmware (June 2022 or later), available from the TP-Link Website.