TP-Link reveals several hardware security issues, so patch now or be at risk

• TP-Link fixed four Omada gateway bugs, two rated critical to code execution
• Three were command injection errors; an allowed root shell via mismanagement of privileges
• Multiple models affected; a critical bug requires no approval for exploitation

Network equipment manufacturer TP-Link has patched four vulnerabilities discovered in its Omada gateway products, including two critical severities that could allow arbitrary code execution.

In a security advisory, TP-Link said three out of four bugs were command injection vulnerabilities. The fourth was an improper privilege management error.