important · Edge — TP-Link
One adjacent-network packet can execute commands as root on a Deco BE11000.
Affects
TP-Link Deco BE11000 v2, an embedded tri-band Wi-Fi 7 whole-home mesh router.
A crafted UDP packet reaches the TDDP module and triggers operating-system command injection with root privileges.
Detail and 2 sources
TP-Link has published a fix, but its effect was not assessed for this brief.