high8.8
CVE-2025-14756
Command injection vulnerability was found in the admin interface component of TP-Link Archer MR600 v5 firmware, allowing authenticated attackers to execute sys…
Impact
Command injection vulnerability was found in the admin interface component of TP-Link Archer MR600 v5 firmware, allowing authenticated attackers to execute system commands with a limited character length via crafted input in the browser developer console, possibly leading to service disruption or full compromise.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Archer Mr600 Firmware | before 1.1.0 |