CVE-2021-41653

CVSS 3.1: 9.8 critical
EPSS: 76%p100
Published: Nov 13, 2021 · Nov 13, 2021
Modified: Jul 9, 2026

Analyze CVE-2021-41653 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address input field.

Vendors: tp-link

Products: tl-wr840n firmware

Weakness: CWE-94

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (76.0%)

In the news

3 stories

Over 300,000 MikroTik Devices Found Vulnerable to Remote Hacking Bugs

The Hacker NewsDec 10, 11:53 UTC · Dec 10, 2021VulnerabilityCVE-2018-14847 CVE-2019-3977 CVE-2019-3978+36 · 1 read

Dark Mirai botnet spreads targeting RCE on TP

Security AffairsDec 9, 21:19 UTC · Dec 9, 2021VulnerabilityCVE-2021-416533 · 1 read

TP-Link routers under attack from Dark.IoT botnet

The RecordDec 21, 00:00 UTC · Dec 21, 2022MalwareCVE-2021-416532 · 1 read