This vulnerability is a stack-based buffer overflow (CWE-121) in the tmpServer module of TP-Link Archer AX53 v1.0 devices running firmware versions prior to 1.7.1 Build 20260213. It requires an attacker with authenticated adjacent network access to trigger the overflow by submitting a specially crafted configuration file. Successful exploitation may cause a segmentation fault and potentially allow arbitrary code execution, which could alter device state, leak sensitive information, or further compromise device security. The CVSS 4.0 vector indicates the attack requires high privileges and adjacent network access, with high impact on confidentiality, integrity, and availability. No patch or official remediation level is currently documented by the vendor.

Exploitation of this vulnerability can cause device crashes and enable arbitrary code execution, which may lead to unauthorized modification of device settings, exposure of sensitive data, and further compromise of device integrity. The attacker must be authenticated and have adjacent network access, limiting the attack surface. The high CVSS score reflects significant potential impact on device security and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the device's management interfaces to trusted users only and monitor for any suspicious activity. Avoid applying untrusted configuration files. No official vendor remediation or temporary fix is currently documented.