CVE-2021-41653
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address input field.
Risk Assessment
An attacker can remotely take control of the router, potentially leading to network compromise, traffic interception, or further attacks on devices within the local network.
Recommendation
It is recommended to immediately update the router firmware to the latest available version and, if possible, disable the PING function or restrict access to the administrative interface only from trusted IP addresses.
Original NVD description (English source)
The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address input field.