The vulnerability is an operating‑system command injection in the web modules of TP‑Link Archer BE230 v1.2 and Archer AXE75 v2 routers. An attacker who can authenticate from a nearby network segment can supply crafted input that causes the firmware to execute arbitrary OS commands with root privileges, giving the attacker full administrative control. Successful exploitation could allow configuration tampering, accidental or intentional denial‑of‑service, and compromise of network security.

Devices employing TP‑Link Archer BE230 v1.2 firmware or TP‑Link Archer AXE75 v2 firmware are affected. No specific firmware revision numbers are supplied in the data, so all builds belonging to the v1.2 and v2 families are potentially vulnerable.

The CVSS score of 8.5 indicates high severity, while the EPSS score of 2% shows that the likelihood of exploitation is currently low but not negligible. The attack requires that the attacker have authenticated access from an adjacent network, a common scenario for devices exposed on untrusted or guest networks. The vulnerability is not listed in CISA’s KEV catalog, but the combination of local authentication and remote code execution makes it a critical risk if a foothold is gained.