Vulnerabilidades do TP-Link Systems Inc. Archer AX55 v4
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam TP-Link Systems Inc. Archer AX55 v4: 2 registro(s), com versões afetadas e correções.
CVE-2026-18330
Média · 6.1
CWE-321 03/09/2026
Hardcoded Shared RSA-1024 Private Key in TP-Link Archer AX55 v4
A hard-coded
cryptographic key vulnerability exists in the web module of TP-Link Archer
AX55 v4. A LAN attacker who captures an HTTP login session may use the known
shared RSA private key to decrypt the administrator password; the
weakened AES session key further reduces the effort required to
compromise session confidentiality.
Successful
exploitation may disclose the administrator password captured from an HTTP
login session and compromise session confidentiality.
CVE-2026-18167
Alta · 7.7
CWE-121 03/09/2026
Stack-based buffer overflow in TP-Link Archer AX55 v4
A
stack-based buffer overflow vulnerability exists in the EasyMesh module of
TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit
crafted input that causes the easymesh daemon to crash and may potentially
achieve remote code execution on the device.
Successful
exploitation may cause the EasyMesh daemon to crash and may potentially allow
remote code execution when Mesh mode is enabled. This
may result in high impact to the confidentiality, integrity, and availability
of the affected device.