CVE-2022-30075

HighCVSS 8.8

Published: 09/06/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

32.36%

98th percentile - higher than 98% of all known CVEs

Summary

A vulnerability in TP-Link Router AX50 firmware 210730 and older allows remote code execution via importing a malicious backup file through the web interface. The issue is caused by improper validation of imported data.

Risk Assessment

An attacker can take control of the router, leading to network compromise, traffic interception, or using the device as an entry point for further attacks.

Recommendation

Immediately update the TP-Link AX50 router firmware to the latest version and avoid importing backup files from untrusted sources.

Original NVD description (English source)

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation.