Threats tagged 'ghsa-28h6-3mx2-8gjg'

An OS command injection vulnerability exists in the dnsmasq module of TP-Link Archer AX53 version 1.0. An authenticated adjacent attacker can exploit insufficient input validation in processing a specially crafted configuration file to execute arbitrary code. This may lead to modification of device configuration, access to sensitive information, or further system compromise. The vulnerability affects AX53 v1.0 versions before 1.7.1 Build 20260213.