CVE-2022-40486

TP Link Archer AX10 V1 Firmware Version 1.3.1 Build 20220401 Rel. 57450(5553) was discovered to allow authenticated attackers to execute arbitrary code via a crafted backup file.

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

2.09% chance of exploitation in the next 30 days, 81st percentile

Published

2022-09-28

Updated

2025-05-21

Proof-of-concept exploits (1)

• gscamelo/TP-Link-Archer-AX10-V1/blob/main/README.md15★ · 2022-11-11

Security advisories

• https://www.tp-link.com/br/home-networking/wifi-router/archer-ax10
• https://www.tp-link.com/br/support/download/archer-ax10/v1

References

• CVE Record
• NVD entry

Related

• CVE-2018-20580