Security Vulnerabilities
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(web modules) allows adjacent
authenticated
attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.
This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420.
CVSS Score
8.0
EPSS Score
0.001
Published
2026-02-02
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) allows an adjacent
authenticated
attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.
This CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.This issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420.
CVSS Score
8.0
EPSS Score
0.001
Published
2026-02-02
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
CVSS Score
7.1
EPSS Score
0.0
Published
2026-02-02
Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
CVSS Score
7.1
EPSS Score
0.0
Published
2026-02-02
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
CVSS Score
7.8
EPSS Score
0.0
Published
2026-02-02
Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors.
CVSS Score
7.8
EPSS Score
0.0
Published
2026-02-02
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
CVSS Score
7.8
EPSS Score
0.0
Published
2026-02-02
Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.
CVSS Score
7.8
EPSS Score
0.0
Published
2026-02-02
Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.
CVSS Score
7.8
EPSS Score
0.0
Published
2026-02-02
Transient DOS when processing a received frame with an excessively large authentication information element.
CVSS Score
6.5
EPSS Score
0.0
Published
2026-02-02