This vulnerability (CWE-863) affects TP-Link Aginet HB810(US2) devices across multiple versions (1.0, 1.6, 2.0, 2.6). Insufficient authorization validation permits authenticated users with low privileges to escalate their privileges and execute administrative functions. The CVSS 4.0 base score is 8.6, indicating a high impact with network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor, and no known exploits are reported in the wild.

An attacker with low-level authenticated access can perform unauthorized administrative actions, including creating privileged accounts and modifying critical device configurations. This could compromise device security and potentially impact network integrity and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to authenticated users and monitor for suspicious administrative activities. Avoid granting unnecessary privileges to low-level users.