CVE-2021-41653

PoC —

CVSS 3.1

9.8 critical

EPSS

76%p100

Published

Nov 13, 2021 (Nov 13, 2021)

Modified

Jul 9, 2026

Description

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address input field.

Vendors: tp-link
Products: tl-wr840n firmware
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (76.0%)

In the news3 stories

Over 300,000 MikroTik Devices Found Vulnerable to Remote Hacking Bugs

The Hacker NewsDec 10, 11:53 UTC · Dec 10, 2021Vulnerability CVE-2018-14847 CVE-2019-3977 CVE-2019-3978+3 CVEs

Dark Mirai botnet spreads targeting RCE on TP

Security AffairsDec 9, 21:19 UTC · Dec 9, 2021Vulnerability CVE-2021-41653

TP-Link routers under attack from Dark.IoT botnet

The RecordDec 21, 00:00 UTC · Dec 21, 2022Malware CVE-2021-41653