EXPOSURES › CVE-2022-25061
CVE-2022-25061
CRITICAL
DETAIL
SourceNVD · cve
Published2022-02-25
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-25061 ↗
⚡ RCE
SHAME 50/100
rce
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
PLAYERS IMPLICATED
DESCRIPTION
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.
SENTIMENT · TRUSTED SOURCES
synthesis
severe-fallout
-0.60
TP-Link faced severe fallout due to active exploitation of a critical command injection flaw in widely deployed routers, prompting urgent CISA warnings and public concern over ongoing sales of vulnera
Severe fallout highlighted by active exploitation and urgent regulatory warnings.
"Thousands of widely used TP-Link routers—still being sold online with glowing reviews—have been found vulnerable to a critical command injection flaw that’s now under active exploitation by threat actors."
Neutral corporate page with no direct commentary on the specific CVE-2022-25061 incident.
Neutral directory page with no specific commentary on TP-Link or CVE-2022-25061.
Neutral database page with no specific commentary on TP-Link or CVE-2022-25061.
Neutral tracking page with no specific commentary on TP-Link or CVE-2022-25061.
Neutral database page with no specific commentary on TP-Link or CVE-2022-25061.
Neutral factual reporting of the vulnerability discovery.
"TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute."
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.