← Vulnerability feed

Vulnerability record · CVE-2022-30075 · published 9 June 2022

CVE-2022-30075: Tp-link archer ax50 firmware vulnerability

Tp Link · Archer Ax50 Firmware

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation.

8.8 CVSS 3.1 High EPSS 34% · top 1.7%
8.8CVSS 3.1 base score, v2 6.5
34%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References, 6 tagged exploit
9 Jul 2026Last modified by NVD

Description

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/167522/TP-Link-AX50-Remote-Code-Execution.html ExploitThird Party AdvisoryVDB Entry
https://github.com/aaronsvk Third Party Advisory
https://github.com/aaronsvk/CVE-2022-30075 ExploitThird Party Advisory
https://www.exploit-db.com/exploits/50962 ExploitThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/167522/TP-Link-AX50-Remote-Code-Execution.html ExploitThird Party AdvisoryVDB Entry
https://github.com/aaronsvk Third Party Advisory
https://github.com/aaronsvk/CVE-2022-30075 ExploitThird Party Advisory
https://www.exploit-db.com/exploits/50962 ExploitThird Party AdvisoryVDB Entry

Track CVE-2022-30075 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.0CVE-2023-40357Tp-link archer ax50 firmware os command injection vulnerabilityMultiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows…EPSS 0.49%6.1CVE-2024-2188Tp-link archer ax50 firmware cross-site scripting vulnerabilityCross-Site Scripting (XSS) vulnerability stored in TP-Link Archer AX50 affecting firmware version 1.0.11 build 2022052. This vulnerability could allo…EPSS 1.0%

Source: NIST National Vulnerability Database (record CVE-2022-30075), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.