CVE-2025-6542

🗓️ 21 Oct 2025 00:23:08Reported by TPLinkType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 122 Views

CVE-2025-6542 enables OS command injection via parameters; a logged-in user can execute commands.

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	TP-Link Omada Network Gateway Command Injection	22 Oct 202500:00	–	bdu_fstec
Circl	CVE-2025-6542	21 Oct 202501:41	–	circl
CNNVD	TP-Link Omada gateway security vulnerabilities	21 Oct 202500:00	–	cnnvd
Cvelist	CVE-2025-6542 OS command injection in multiple parameters	21 Oct 202500:23	–	cvelist
EUVD	EUVD-2025-35117	21 Oct 202500:23	–	euvd
NVD	CVE-2025-6542	21 Oct 202501:15	–	nvd
osv_cve	CVE-2025-6542	21 Oct 202501:15	–	osv_cve
Positive Technologies	PT-2025-42823	21 Oct 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-6542: Improper Neutralization of Special Elements used in an OS Command	21 Oct 202500:00	–	rapid7
RedhatCVE	CVE-2025-6542	22 Oct 202501:12	–	redhatcve

NVD

Vulners

Node

AND

tp-link er8411_firmwareRange<1.3.3

tp-link er8411_firmwareMatch1.3.3-

tp-link er8411Match-

Node

AND

tp-link er7412-m2_firmwareRange<1.1.0

tp-link er7412-m2_firmwareMatch1.1.0-

tp-link er7412-m2Match-

Node

AND

tp-link er707-m2_firmwareRange<1.3.1

tp-link er707-m2_firmwareMatch1.3.1-

tp-link er707-m2Match-

Node

AND

tp-link er7206_firmwareRange<2.2.2

tp-link er7206_firmwareMatch2.2.2-

tp-link er7206Match-

Node

AND

tp-link er605_firmwareRange<2.3.1

tp-link er605_firmwareMatch2.3.1-

tp-link er605Match-

Node

AND

tp-link er706w_firmwareRange<1.2.1

tp-link er706w_firmwareMatch1.2.1-

tp-link er706wMatch-

Node

AND

tp-link er706w-4g_firmwareRange<1.2.1

tp-link er706w-4g_firmwareMatch1.2.1-

tp-link er706w-4gMatch-

Node

AND

tp-link er7212pc_firmwareRange<2.1.3

tp-link er7212pc_firmwareMatch2.1.3-

tp-link er7212pcMatch-

Node

AND

tp-link g36_firmwareRange<1.1.4

tp-link g36_firmwareMatch1.1.4-

tp-link g36Match-

Node

AND

tp-link g611_firmwareRange<1.2.2

tp-link g611_firmwareMatch1.2.2-

tp-link g611Match-

Node

AND

tp-link fr365_firmwareRange<1.1.10

tp-link fr365_firmwareMatch1.1.10-

tp-link fr365Match-

Node

AND

tp-link fr205_firmwareRange<1.0.3

tp-link fr205_firmwareMatch1.0.3-

tp-link fr205Match-

Node

AND

tp-link fr307-m2_firmwareRange<1.2.5

tp-link fr307-m2_firmwareMatch1.2.5-

tp-link fr307-m2Match-

[
  {
    "defaultStatus": "unknown",
    "product": "Omada gateways",
    "vendor": "TP-Link Systems Inc.",
    "versions": [
      {
        "lessThan": "ER8411 1.3.3, ER7412-M2 1.1.0, ER707-M2 1.3.1, ER7206 2.2.2, ER605 2.3.1, ER706W 1.2.1, ER706W-4G 1.2.1, ER7212PC 2.1.3",
        "status": "affected",
        "version": "0",
        "versionType": "Firmware"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Festa gateways",
    "vendor": "TP-Link Systems Inc.",
    "versions": [
      {
        "lessThan": "FR365 1.1.10, FR205 1.0.3, FR307 1.2.5",
        "status": "affected",
        "version": "0",
        "versionType": "Firmware"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Omada Pro gateways",
    "vendor": "TP-Link Systems Inc.",
    "versions": [
      {
        "lessThan": "G36 1.1.4, G611 1.2.2",
        "status": "affected",
        "version": "0",
        "versionType": "Firmware"
      }
    ]
  }
]

Source	Link
tp-link	www.tp-link.com/us/business-networking/soho-festa-gateway/
omadanetworks	www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/
omadanetworks	www.omadanetworks.com/us/business-networking/all-omada-router/
support	www.support.omadanetworks.com/en/document/108455/

18 Oct 2026 21:10Current

8.9High risk

Vulners AI Score8.9

CVSS 3.19.8

CVSS 49.3

EPSS0.01015

SSVC

CWE-78