PT-2025-16038 · Tp Link · Deco Be65 Pro

Chuya Hayakawa + 1 · Published 2025-04-11 · Updated 2025-04-16 · CVE-2025-32107

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Deco BE65 Pro versions prior to Deco BE65 Pro(JP) V1 1.1.2 Build 20250123

Description: The issue is related to an OS command injection vulnerability. If exploited, it allows a user who can log in to the device to execute an arbitrary OS command.

Recommendations: For versions prior to Deco BE65 Pro(JP) V1 1.1.2 Build 20250123, update to version Deco BE65 Pro(JP) V1 1.1.2 Build 20250123 or later to resolve the issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-32107

Affected Products

Deco Be65 Pro

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-32107 · Security Note
• https://twitter.com/cybercronai/status/1910988896961241414 · Twitter Post
• https://tp-link.com/jp/support/download/deco-be65-pro/#Firmware · Note
• https://t.me/cvenotify/118805 · Telegram Post
• https://twitter.com/syedaquib77/status/1912386674711228664 · Twitter Post
• https://twitter.com/CVEnew/status/1910615228343070971 · Twitter Post
• https://jvn.jp/en/vu/JVNVU94912671 · Note