Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: Archer AX50 firmware versions prior to 'Archer AX50(JP)V1230529', Archer A10 firmware versions prior to 'Archer A10(JP)V2230504', Archer AX10 firmware versions prior to 'Archer AX10(JP)V1.2230508', and Archer AX11000 firmware versions prior to 'Archer AX11000(JP)V1230523'.
Archer A10 firmware versions prior to 'Archer A10(JP)V2230504' allows a network-adjacent unauthenticated attacker to execute arbitrary OS commands.