Description (CNA)
The backup restore function does not properly validate unexpected or unrecognized tags within the backup file. When such a crafted file is restored, the injected tag is interpreted by a shell, allowing execution of arbitrary commands with root privileges. Successful exploitation allows the attacker to gain root-level command execution, compromising confidentiality, integrity and availability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TP-Link Systems Inc. / Archer RE605X | affected 0 before (EU)_V3_20260113, (US)_V3_20260126 |
CWE
CWE-20
References
- https://www.tp-link.com/en/support/download/re605x/v3/#Firmware
- https://www.tp-link.com/us/support/download/re605x/v3/#Firmware
- https://www.tp-link.com/us/support/faq/4929/
- https://nico-security.com/posts/cve-2025-15545
ADP enrichment
No English description supplied.
No references supplied.