Skip to content
COOEY

EXPOSURES › CVE-2022-25060

CVE-2022-25060

CRITICAL
DETAIL
SourceNVD · cve Published2022-02-25 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-25060 ↗
⚡ RCE SHAME 50/100 rce

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.

▸ RECOMMENDED ACTION  Remote code execution — patch the affected products on priority.

PLAYERS IMPLICATED
tp-link · vendortl-wr840n · producttl-wr840n firmware · product
DESCRIPTION

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.