TP-Link Archer AX55 Flaws Expose Routers to Code Execution
ID: e2683106-0b7f-519a-928e-9fc37a6fa302
STIX ID: report--e2683106-0b7f-519a-928e-9fc37a6fa302
Feed Name: securityonline.info
Threat Score
TP-Link disclosed two vulnerabilities in the Archer AX55 v4 — a stack-based buffer overflow in the EasyMesh daemon that may enable remote code execution (CVSSv4 7.7) and a hardcoded RSA-1024 private key in the web login module that can expose admin credentials (CVSSv4 6.1). Both are fixed in firmware 1.2.1 Build 20260527; users should update immediately, change admin credentials, prefer HTTPS, and disable Mesh mode if it is not required.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.