TP-Link Reveals More Hardware Security Issues, So Patch Now or Take Risk

• TP-Link fixed four Omada Gateway flaws, including two deemed critical to code execution
• Three were command injection bugs; a root shell allowed via poor privilege management
• Several models affected; a critical flaw requires no authentication to be exploited

Network equipment maker TP-Link has fixed four vulnerabilities discovered in its Omada gateway products, including two of critical severity that could allow arbitrary code execution.

In a security advisory, TP-Link said three out of four flaws were command injection vulnerabilities. The fourth issue was an improper privilege management flaw.