Description (CNA)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TP-Link Deco BE25 v1.0 (web modules) allows authenticated adjacent attacker to read arbitrary files or cause denial of service. This issue affects Deco BE25 v1.0: through 1.1.1 Build 20250822.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TP-Link Systems Inc. / Deco BE25 v1.0 | affected 0 through 1.1.1 Build 20250822 |
CWE
CWE-22
References
- https://www.tp-link.com/sg/support/download/deco-be25/#Firmware
- https://www.tp-link.com/en/support/download/deco-be25/#Firmware
- https://www.tp-link.com/us/support/download/deco-be25/v1/#Firmware
- https://www.tp-link.com/us/support/faq/4993/
ADP enrichment
No English description supplied.
No references supplied.