TP-Link Archer AXE75 OpenVPN Command Injection Vulnerability Advisory (CVE-2025-9044)

Vulnerability Overview Vulnerability Name: Command Injection Vulnerability in OpenVPN of Archer AXE75 CVE ID: CVE-2025-9044 CVSS v4.0 Score: 8.5 / High Description: This vulnerability allows attackers to inject commands via special characters in the OpenVPN client configuration file, potentially compromising device configuration integrity, network security, and service availability. Affected Products Affected Products/Versions: - Model: Archer AXE75 - Hardware Version: V1 - Firmware Version: 1.5.6 Build 20260623 Remediation Recommended Actions: 1. Update affected devices to the latest firmware version to fix the vulnerability. 2. Download links: - Netherlands: Download for Archer AXE75 ITPLink - United States: Download for Archer AXE75 ITPLink Additional Information Disclaimer: This announcement is for reference only. TP-Link does not guarantee the accuracy of the information and recommends users to promptly apply firmware updates or implement workarounds as documented. Related FAQs: - How to configure port security features - Kasa Smart Camera Setup, Recording, Security, etc. - WPA2 Security (KRACKs) Vulnerability Statement More Resources: - Make Hotel WiFi More Secure and User-Friendly - What is Home Network Security, and How Can I Protect My WiFi? Community Support TP-Link Community: Provides Q&A and expert assistance. Subscribe and Contact Subscribe: Get exclusive offers and news. Social Media: Links to Facebook, Instagram, YouTube, LinkedIn, and X. Footer Information About Us: Includes company information, sustainability, privacy policy, etc. Partners: Provides partner programs, registration, and MAP policy. Learning Center: Provides technical trends and training/certification. Promotions: Provides latest promotional information. Copyright Information Copyright: ©2026 TP-Link Systems Inc. and its affiliated companies. All rights reserved. Region: United States / English The above is a summary of key vulnerability information from the webpage screenshot.

Goal Reached Thanks to every supporter — we hit 100%!

TP-Link Archer AXE75 OpenVPN Command Injection Vulnerability Advisory (CVE-2025-9044)