CVE-2022-25064
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
A remote code execution (RCE) vulnerability was discovered in TP-LINK TL-WR840N(ES) firmware version V6.20_180709 via the oal_wan6_setIpAddr function. An unauthenticated attacker can execute arbitrary code on the device.
Risk Assessment
An attacker can take full control of the router, modify its configuration, intercept network traffic, or use it as a pivot point for further attacks within the internal network.
Recommendation
Immediately update the router firmware to the latest available version or consider replacing the device with a model that has current vendor support.
Other vulnerabilities in TP-LINK TL-WR840N(ES)
See all- CVE-2022-25061Critical
A command injection vulnerability was discovered in TP-LINK TL-WR840N(ES) firmware version V6.20_180709 via the component oal_setIp6DefaultRoute. An attacker can remotely execute arbitrary system commands without authentication.
- CVE-2022-25060Critical
A command injection vulnerability was discovered in TP-LINK TL-WR840N(ES) firmware version V6.20_180709. The flaw resides in the oal_startPing component.
- CVE-2022-25062High
An integer overflow vulnerability was discovered in the TP-LINK TL-WR840N(ES) router firmware version V6.20_180709, specifically in the dm_checkString function. This flaw allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.
Original NVD description (English source)
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.