An authentication weakness in the TP-Link TDDP v2 service of the TP-Link RE305 V3 device allows an unauthenticated attacker on the same local network to forge protocol packets. This weakness arises from the use of a fixed and derivable cryptographic key. Exploitation can lead to executing arbitrary system commands with root privileges.