CyberRota Analysis
AI-GeneratedAn authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows attackers with administrative access to execute arbitrary system commands with root privileges through injected shell metacharacters via a VPN connection. This could lead to severe consequences, including persistent backdoors, credential theft, and attacks on connected devices. Network administrators and security teams managing affected TP-Link routers should prioritize patching this vulnerability to mitigate potential risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors, credential theft, LAN reconnaissance, and router-assisted attacks against connected devices.