CVE-2022-25060

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a command injection vulnerability via the component oalstartPing...

TP-LINK TL-WR840N Command Injection (CVE-2022-25060)

A command injection vulnerability exists in TP-LINK TL-WR840N. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-25060

The connected advisories confirm a command injection vulnerability in TP-LINK TL-WR840N(ES) V6.20 180709, caused by improper handling in the oal_startPing component. The flaw in the firmware allows an attacker to execute arbitrary commands via the oal_startPing pathway, leveraging the libcmm.so u...