CVE-2022-25061
OS command injection in Tp Link Tl Wr840n
CVSS score
9.8
EPSS probability
%58.7
Risk score
5.8
Published
4 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
This script exploits a remote command execution vulnerability under the oal_setIp6DefaultRoute component in the TPLink WR840N router.
Makefile Go / Python
Nuclei: TP-Link TL-WR840N - Command Injection
Makefile Go / Python
https://east-trowel-102.notion.site/CVE-2021-XXXX-Injection-of-commands-through-object-oal_setIp6DefaultRoute-EN-ddf9c1db199d49829269147ada6cb312
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2021-41653Code injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:3EPSS %76
9.8
CVE-2022-25060OS command injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:2EPSS %40
9.8
CVE-2022-25064OS command injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:3EPSS %36
8.8
CVE-2022-30075Vulnerability in Tp Link Archer Ax50 Firmware
Patch status unknown Public Exploits:7EPSS %35
6.5
CVE-2023-50224 Actively exploitedVulnerability in Tp Link Tl Wr841n
WorkaroundEPSS %20
9.3
CVE-2026-19586Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways
Patch verified Public Exploits:1EPSS %6
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-25061"