Skip to content
COOEY

EXPOSURES › CVE-2022-25060

CVE-2022-25060

CRITICAL
DETAIL
SourceNVD · cve Published2022-02-25 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-25060 ↗
⚡ RCE SHAME 50/100 rce

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.

▸ RECOMMENDED ACTION  Remote code execution — patch the affected products on priority.

PLAYERS IMPLICATED
tp-link · vendortl-wr840n · producttl-wr840n firmware · product
DESCRIPTION

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.60
TP-Link faced severe fallout due to active exploitation of its command injection flaw, prompting urgent CISA warnings and widespread concern over the vulnerability's impact on widely deployed routers.
dailysecurityreview.com ↗ severe-fallout -0.80
Severe fallout highlighted by active exploitation and urgent CISA warnings.
"CISA warns of active exploitation targeting outdated TP-Link routers with command injection flaws. Users and federal agencies must act fast to avoid security breaches."
cooey ↗ severe-fallout -0.50
Neutral reporting of the vulnerability discovery.
"TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing."
www.cvefind.com ↗ severe-fallout +0.00
No relevant content for this CVE.
github.com ↗ severe-fallout +0.00
No relevant content for this CVE.
securityonline.info ↗ severe-fallout +0.00
No relevant content for this CVE.
www.tp-link.com ↗ severe-fallout +0.00
No relevant content for this CVE.
advisories.gitlab.com ↗ severe-fallout +0.00
No relevant content for this CVE.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.