TP-LINK TL-WR840N(ES) vulnerabilities
4 known CVE vulnerabilities in TP-LINK TL-WR840N(ES), translated and rated.
- CVE-2022-25064Critical
A remote code execution (RCE) vulnerability was discovered in TP-LINK TL-WR840N(ES) firmware version V6.20_180709 via the oal_wan6_setIpAddr function. An unauthenticated attacker can execute arbitrary code on the device.
- CVE-2022-25061Critical
A command injection vulnerability was discovered in TP-LINK TL-WR840N(ES) firmware version V6.20_180709 via the component oal_setIp6DefaultRoute. An attacker can remotely execute arbitrary system commands without authentication.
- CVE-2022-25060Critical
A command injection vulnerability was discovered in TP-LINK TL-WR840N(ES) firmware version V6.20_180709. The flaw resides in the oal_startPing component.
- CVE-2022-25062High
An integer overflow vulnerability was discovered in the TP-LINK TL-WR840N(ES) router firmware version V6.20_180709, specifically in the dm_checkString function. This flaw allows an attacker to cause a Denial of Service (DoS) via a crafted HTTP request.