PT-2026-6104 · Tp Link · Archer Be230

0Xakm · Publicado 2026-02-03 · Atualizado 2026-02-03 · CVE-2026-22228

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Média

Vetor base

AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

Name of the Vulnerable Software and Affected Versions TP-Link Archer BE230 versions prior to 1.2.4 Build 20251218 rel.70420

Description An authenticated user with high privileges can cause a denial-of-service condition by restoring a specially crafted configuration file. The issue occurs when the configuration file contains an excessively long parameter. Restoring this file can render the device unresponsive, requiring a reboot to restore functionality.

Recommendations Update TP-Link Archer BE230 to version 1.2.4 Build 20251218 rel.70420 or later.

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2026-22228

Produtos afetados

Archer Be230

Referências · 7

• https://tp-link.com/us/support/download/archer-be230/v1.20/#Firmware · Correção
• https://t.me/CVEtracker/43628 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-22228 · Nota de Segurança
• https://tp-link.com/en/support/download/archer-be230/v1.20/#Firmware · Correção
• https://osv.dev/vulnerability/CVE-2026-22228 · Aviso do Fabricante
• https://tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware · Correção
• https://tp-link.com/us/support/faq/4941 · Aviso do Fabricante