CVE-2022-25061

PoC —

CVSS 3.1

9.8 critical

EPSS

59%p99

Published

Feb 25, 2022 (Feb 25, 2022)

Modified

Jul 9, 2026

Description

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.

Vendors: tp-link
Products: tl-wr840n firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (58.7%)

In the news0 stories

No ingested article mentions this CVE yet.