This vulnerability (CVE-2025-30241) affects TP-Link HB810(US2) devices across multiple versions (V1.0, 1.6, 2.0, 2.6). The root cause is improper neutralization of special elements used in OS command execution (CWE-78). Authenticated adjacent attackers can supply crafted input to web interface components that is passed unsanitized to system-level command execution functions. This enables execution of arbitrary OS commands with elevated privileges, risking full device compromise. The CVSS 4.0 base score is 8.6, reflecting high severity with attack vector adjacent network, low attack complexity, no user interaction, and privileges required at low level.

An attacker with authentication and adjacent network access can execute arbitrary operating system commands on the affected TP-Link devices with elevated privileges. This can lead to full compromise of the device, including unauthorized control and potential disruption of device functionality or network security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time. Until a patch is available, restrict access to the device's web interface to trusted users and networks only, and monitor for suspicious activity. Follow updates from TP-Link for official remediation.