CVE-2025-6541

🗓️ 21 Oct 2025 00:21:42Reported by TPLinkType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 20 Views

CVE-2025-6541 enables arbitrary OS command execution by an authenticated user through the web management interface.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-6541	21 Oct 202501:51	–	circl
CNNVD	TP-Link Omada gateways 安全漏洞	21 Oct 202500:00	–	cnnvd
Cvelist	CVE-2025-6541 OS command injection using information obtained from the web management interface	21 Oct 202500:21	–	cvelist
EUVD	EUVD-2025-35118	21 Oct 202500:21	–	euvd
NVD	CVE-2025-6541	21 Oct 202501:15	–	nvd
OSV	CVE-2025-6541	21 Oct 202501:15	–	osv
RedhatCVE	CVE-2025-6541	22 Oct 202501:12	–	redhatcve
The Hacker News	TP-Link Patches Four Omada Gateway Flaws, Two Allow Remote Code Execution	22 Oct 202504:38	–	thn
Vulnrichment	CVE-2025-6541 OS command injection using information obtained from the web management interface	21 Oct 202500:21	–	vulnrichment

NVD

Node

tp-link er706w_firmwareRange<1.2.1

tp-link er706w_firmwareMatch1.2.1-

AND

tp-link er706wMatch-

Node

tp-link er706w-4g_firmwareRange<1.2.1

tp-link er706w-4g_firmwareMatch1.2.1-

AND

tp-link er706w-4gMatch-

Node

tp-link er7212pc_firmwareRange<2.1.3

tp-link er7212pc_firmwareMatch2.1.3-

AND

tp-link er7212pcMatch-

Node

tp-link g36_firmwareRange<1.1.4

tp-link g36_firmwareMatch1.1.4-

AND

tp-link g36Match-

Node

tp-link g611_firmwareRange<1.2.2

tp-link g611_firmwareMatch1.2.2-

AND

tp-link g611Match-

Node

tp-link fr365_firmwareRange<1.1.10

tp-link fr365_firmwareMatch1.1.10-

AND

tp-link fr365Match-

Node

tp-link fr205_firmwareRange<1.0.3

tp-link fr205_firmwareMatch1.0.3-

AND

tp-link fr205Match-

Node

tp-link fr307-m2_firmwareRange<1.2.5

tp-link fr307-m2_firmwareMatch1.2.5-

AND

tp-link fr307-m2Match-

Node

tp-link er8411_firmwareRange<1.3.3

tp-link er8411_firmwareMatch1.3.3-

AND

tp-link er8411Match-

Node

tp-link er7412-m2_firmwareRange<1.1.0

tp-link er7412-m2_firmwareMatch1.1.0-

AND

tp-link er7412-m2Match-

Node

tp-link er707-m2_firmwareRange<1.3.1

tp-link er707-m2_firmwareMatch1.3.1-

AND

tp-link er707-m2Match-

Node

tp-link er7206_firmwareRange<2.2.2

tp-link er7206_firmwareMatch2.2.2-

AND

tp-link er7206Match-

Node

tp-link er605_firmwareRange<2.3.1

tp-link er605_firmwareMatch2.3.1-

AND

tp-link er605Match-

[
  {
    "defaultStatus": "unknown",
    "product": "Omada gateways",
    "vendor": "TP-Link Systems Inc.",
    "versions": [
      {
        "lessThan": "ER8411 1.3.3, ER7412-M2 1.1.0, ER707-M2 1.3.1, ER7206 2.2.2, ER605 2.3.1, ER706W 1.2.1, ER706W-4G 1.2.1, ER7212PC 2.1.3",
        "status": "affected",
        "version": "0",
        "versionType": "Firmware"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Festa gateways",
    "vendor": "TP-Link Systems Inc.",
    "versions": [
      {
        "lessThan": "FR365 1.1.10, FR205 1.0.3, FR307 1.2.5",
        "status": "affected",
        "version": "0",
        "versionType": "Firmware"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Omada Pro gateways",
    "vendor": "TP-Link Systems Inc.",
    "versions": [
      {
        "lessThan": "G36 1.1.4, G611 1.2.2",
        "status": "affected",
        "version": "0",
        "versionType": "Firmware"
      }
    ]
  }
]

Source	Link
omadanetworks	www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/
omadanetworks	www.omadanetworks.com/us/business-networking/all-omada-router/
support	www.support.omadanetworks.com/en/document/108455/
tp-link	www.tp-link.com/us/business-networking/soho-festa-gateway/

24 Oct 2025 13:45Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.18.8

CVSS 48.6

EPSS0.0009

SSVC

CWE-78