PT-2026-6104 · Tp Link · Archer Be230

0Xakm · Published 2026-02-03 · Updated 2026-02-03 · CVE-2026-22228

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

Name of the Vulnerable Software and Affected Versions TP-Link Archer BE230 versions prior to 1.2.4 Build 20251218 rel.70420

Description An authenticated user with high privileges can cause a denial-of-service condition by restoring a specially crafted configuration file. The issue occurs when the configuration file contains an excessively long parameter. Restoring this file can render the device unresponsive, requiring a reboot to restore functionality.

Recommendations Update TP-Link Archer BE230 to version 1.2.4 Build 20251218 rel.70420 or later.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2026-22228

Affected Products

Archer Be230

References · 7

• https://tp-link.com/us/support/download/archer-be230/v1.20/#Firmware · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-22228 · Security Note
• https://tp-link.com/en/support/download/archer-be230/v1.20/#Firmware · Patch
• https://osv.dev/vulnerability/CVE-2026-22228 · Vendor Advisory
• https://tp-link.com/sg/support/download/archer-be230/v1.20/#Firmware · Patch
• https://tp-link.com/us/support/faq/4941 · Vendor Advisory
• https://t.me/CVEtracker/43628 · Telegram Post