Threats tagged 'ghsa-57xx-hp7r-53h8'

An OS command injection vulnerability exists in the OpenVPN module of TP-Link Archer AX53 version 1.0. An authenticated adjacent attacker can exploit this flaw by providing a specially crafted configuration file, leading to execution of arbitrary system commands. This may result in modification of configuration files, disclosure of sensitive information, or further compromise of the device. The vulnerability affects AX53 v1.0 versions before 1.7.1 Build 20260213.