CVE-2022-25061
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
A command injection vulnerability was discovered in TP-LINK TL-WR840N(ES) firmware version V6.20_180709 via the component oal_setIp6DefaultRoute. An attacker can remotely execute arbitrary system commands without authentication.
Risk Assessment
The risk involves potential full device takeover by an unauthenticated attacker, leading to local network compromise and traffic interception.
Recommendation
Immediately update the router firmware to the latest available version or consider replacing the device with a supported model.
Other vulnerabilities in TP-LINK TL-WR840N(ES)
See all- CVE-2022-25064Critical
A remote code execution (RCE) vulnerability was discovered in TP-LINK TL-WR840N(ES) firmware version V6.20_180709 via the oal_wan6_setIpAddr function. An unauthenticated attacker can execute arbitrary code on the device.
- CVE-2022-25060Critical
A command injection vulnerability was discovered in TP-LINK TL-WR840N(ES) firmware version V6.20_180709. The flaw resides in the oal_startPing component.
- CVE-2022-25062High
An integer overflow vulnerability was discovered in the TP-LINK TL-WR840N(ES) router firmware version V6.20_180709, specifically in the dm_checkString function. This flaw allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
Original NVD description (English source)
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.