Sunshinefactory

**Name of the Vulnerable Software and Affected Versions** TP-Link Archer BE230 versions prior to 1.2.4 Build 20251218 rel.70420 **Description** An OS Command Injection issue exists in TP-Link Archer BE230 devices. A nearby, authenticated attacker can execute arbitrary code. Successful exploitation could grant an attacker full administrative control, compromising configuration integrity, network security, and service availability. This vulnerability affects web modules within the device. **Recommendations** Update to version 1.2.4 Build 20251218 rel.70420 or later.

**Name of the Vulnerable Software and Affected Versions** TP-Link Archer BE230 versions prior to 1.2.4 Build 20251218 rel.70420 **Description** A command injection issue exists that may be triggered after administrative authentication through importing a specially crafted VPN client configuration file. Successful exploitation could grant an attacker complete administrative control over the device, potentially compromising configuration integrity, network security, and service availability. This is one of several distinct command injection issues identified in separate code paths. **Recommendations** Update to version 1.2.4 Build 20251218 rel.70420 or later.