The vulnerability resides in the TP‑Link TDDP v2 service on the RE305 V3 router. A fixed, derivable cryptographic key is used, allowing an attacker to forge protocol packets. This can result in unauthorized privileged operations, including the ability to execute operating‑system commands. The exploit achieves root‑level command execution, compromising the entire device.

TP‑Link Systems Inc. RE305 V3 routers are affected. No additional products or versions are listed in the current data.

The CVSS score of 8.7 indicates a high impact with remote code execution potential. EPSS is not available, so the likelihood of exploitation cannot be quantified, but the lack of a KEV listing suggests no publicly available exploits have yet been recorded. The attack likely requires local network access and the ability to send crafted packets to the TDDP service. An unauthenticated local attacker could therefore exploit this weakness to gain full system control.