CVE-2025-14756— Authenticated Command Injection Vulnerability in Archer MR600
Quick assessment
Affected
TP-Link Systems Inc. Archer MR600 v5.0
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
TP-Link Archer MR600是中国普联（TP-Link）公司的一款无线路由器。 TP-Link Archer MR600 v5存在安全漏洞，该漏洞源于管理界面存在命令注入，可能导致服务中断或系统完全被破解。
Possible ATT&CK Techniques 3 AI
T1505 · Server Software Component T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-14756
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authenticated Command Injection Vulnerability in Archer MR600
Source: CVE Program / CVE List V5
Vulnerability Description
Command injection vulnerability was found in the admin interface component of TP-Link Archer MR600 v5 firmware, allowing authenticated attackers to execute system commands with a limited character length via crafted input in the browser developer console, possibly leading to service disruption or full compromise.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Source: CVE Program / CVE List V5
Vulnerability Title
TP-Link Archer MR600 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TP-Link Archer MR600是中国普联（TP-Link）公司的一款无线路由器。 TP-Link Archer MR600 v5存在安全漏洞，该漏洞源于管理界面存在命令注入，可能导致服务中断或系统完全被破解。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TP-Link Systems Inc. | Archer MR600 v5.0 | 0 ~ 1.1.0 0.9.1 v0001.0 Build 250930 Rel.63611n | - |
|
II. Public POCs for CVE-2025-14756
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-14756
请登录查看更多情报信息。
Same Patch Batch · TP-Link Systems Inc. · 2026-01-26 · 4 CVEs total
| CVE-2025-9522 | Blind Server-Side Request Forgery (SSRF) in Omada Controller | |
| CVE-2025-9521 | Password Confirmation Bypass in Omada Controller | |
| CVE-2025-9520 | IDOR Leading to Owner Account Hijacking in Omada Controller |
IV. Related Vulnerabilities
Same vendor: TP-Link Systems Inc.
-
CVE-2026-17252
Unauthenticated Denial of Service via Composed HTTP Parsing -
CVE-2026-17251
Unauthenticated Denial of Service via Null Pointer Dereferen -
CVE-2026-17250
Authenticated Remote Code Execution via Stack-Based Buffer O -
CVE-2026-19683
Unencrypted Credential Transmission in Omada Gateway Dynamic -
CVE-2026-19586
Pre-Authentication OS Command Injection in Omada Gateways on
Same weakness: CWE-77
-
CVE-2026-78141
Tenda CH22 exeCommand formexeCommand command injection -
CVE-2026-78063
Tenda CH22 editFileName formeditFileName command injection -
CVE-2026-77988
TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command -
CVE-2026-77945
TRENDnet TEW-821DAP ssi upload.cgi command injection -
CVE-2026-77683
Comfast CF-N1-S mbox-config system command injection
V. Comments for CVE-2025-14756
No comments yet