PT-2026-5692 · Tp Link · Archer Be230

Caprinuxx + 1 · Publicado 2025-12-19 · Atualizado 2026-03-02 · CVE-2026-22229

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TP-Link Archer BE230 versions prior to 1.2.4 Build 20251218 rel.70420

Description A command injection issue exists that may be triggered after administrative authentication through importing a specially crafted VPN client configuration file. Successful exploitation could grant an attacker complete administrative control over the device, potentially compromising configuration integrity, network security, and service availability. This is one of several distinct command injection issues identified in separate code paths.

Recommendations Update to version 1.2.4 Build 20251218 rel.70420 or later.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

BDU:2026-02140

CVE-2026-22229

Produtos afetados

Archer Be230

Referências · 14

• https://tp-link.com/us/support/faq/4935 · Correção, Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-02140 · Nota de Segurança
• https://tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware · Correção
• https://tp-link.com/us/support/download/archer-be230/v1.20/#Firmware · Correção
• https://twitter.com/VulmonFeeds/status/2018410047676518426 · Publicação no Twitter
• https://tp-link.com/en/support/download/deco-be25/#Firmware · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-22229 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-22229 · Aviso do Fabricante
• https://tp-link.com/en/support/download/archer-be230/v1.20/#Firmware · Correção
• https://tp-link.com/sg/support/download/deco-be25/#Firmware · Correção
• https://t.me/CVEtracker/43532 · Publicação no Telegram
• https://twitter.com/DavidMarquet19/status/2028379926340964355 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2018465538519777393 · Publicação no Twitter
• https://tp-link.com/us/support/download/deco-be25/v1/#Firmware · Correção