Authenticated Command Injection Vulnerability in Archer MR600

An authenticated attacker can inject and execute system commands on the TP-Link Archer MR600 router through the admin interface, potentially disrupting services or taking control of the device.

Command injection vulnerability in the admin interface of TP-Link Archer MR600 v5 allows authenticated attackers to execute arbitrary system commands via crafted input submitted through the browser developer console; successful exploitation requires prior authentication and is subject to character length restrictions, but can lead to complete device compromise or denial of service.