The vulnerability arises from improper enforcement of authentication rate-limiting on a debug SSH service in TP-Link Archer C64 v1.0. The SSH service accepts unlimited authentication attempts and shares credentials with the web interface, enabling brute-force attacks to obtain administrative credentials. This flaw allows an attacker with adjacent network access to bypass authentication controls and gain full administrative access to the device.

An attacker who can access the adjacent network can brute-force SSH authentication without restriction, potentially obtaining administrative credentials. This leads to full administrative control over the device, impacting system confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the device's SSH service to trusted hosts only and disable the debug SSH service if possible.