The vulnerability in the implementation of the oal_wan6_setIpAddr() function in the libcmm.so module of the TP-Link TL-WR840N (ES) router’s software allows a attacker to execute arbitrary code.

The vulnerability in the implementation of the oalwan6setIpAddr function in the libcmm.so module of the TP-Link TL-WR840N ES router’s software lies in the failure to properly handle special elements when processing the XTPExternalIPv6Address argument. Exploiting this vulnerability allows an...