Description
A stack-based buffer overflow in the tmpServer module of TP-Link Archer AX53 v1.0 allows an authenticated adjacent attacker to trigger a segmentation fault and potentially execute arbitrary code via a specially crafted configuration file. Successful exploitation may cause a crash and could allow arbitrary code execution, enabling modification of device state, exposure of sensitive data, or further compromise of device integrity. This issue affects AX53 v1.0: before 1.7.1 Build 20260213.
References (5)
Core 5
Core References
Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2302
Third Party Advisory third-party-advisory
https://talosintelligence.com/vulnerability_reports/
Vendor Advisory vendor-advisory
https://www.tp-link.com/us/support/faq/5055/
Scores
CVSS v3
8.0
EPSS
0.0042
EPSS Percentile
33.1%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-121
CWE-787
Status
published
Products (2)
tp-link/archer_ax53_firmware
< 1.7.1
TP-Link Systems Inc./AX53 v1.0
< 1.7.1 Build 20260213
Published
Apr 08, 2026
Tracked Since
Apr 09, 2026