This vulnerability is a stack-based buffer overflow (CWE-121) in the tmpServer module of TP-Link Archer AX53 v1.0 devices running firmware versions prior to 1.7.1 Build 20260213. It requires the attacker to be authenticated and adjacent to the device network. By supplying a specially crafted configuration file, the attacker can cause a segmentation fault and potentially execute arbitrary code with high impact on confidentiality, integrity, and availability. The CVSS 4.0 vector indicates attack vector is adjacent network with high attack complexity and privileges required. The vendor has not yet published an official fix or mitigation guidance.

Successful exploitation may cause device crashes and enable arbitrary code execution. This could allow attackers to modify device state, expose sensitive information, or further compromise the device's integrity. The vulnerability affects confidentiality, integrity, and availability with high severity (CVSS 7.3). No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the device management interface to trusted users only and avoid applying untrusted configuration files. Monitor vendor communications for updates regarding patches or official mitigations.