TP-Link TL-WR840N - Command Injection

The TP-Link TL-WR840NESV6.20180709 router contains a command injection vulnerability in the oalsetIp6DefaultRoute component. This vulnerability allows authenticated attackers to execute arbitrary system commands, leading to complete device compromise. id: CVE-2022-25061 info: name: TP-Link...

CVE-2022-25061

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a command injection vulnerability via the component oalsetIp6DefaultRoute...

TP-Link TL-WR840N Command Injection (CVE-2022-25061)

A command injection vulnerability exists in TP-Link TL-WR840N. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-25061

creationtimestamp| type| source ---|---|--- 2022-02-25 22:21:00+00:00| seen| https://t.me/cibsecurity/38118 2025-06-04 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqspc4ebki2o...

CVE-2022-25061

The Nuclei template for CVE-2022-25061 documents a command-injection vulnerability in the TP-LINK TL-WR840N(ES)_V6.20_180709, specifically in the oal_setIp6DefaultRoute component. It states that authenticated attackers can execute arbitrary system commands, resulting in complete device compromise...