EXPOSURES › CVE-2022-25064
CVE-2022-25064
CRITICAL
DETAIL
SourceNVD · cve
Published2022-02-25
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-25064 ↗
⚡ RCE
SHAME 50/100
rce
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
PLAYERS IMPLICATED
DESCRIPTION
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.
SENTIMENT · TRUSTED SOURCES
synthesis
severe-fallout
-0.60
TP-Link faced severe fallout due to an actively exploited RCE vulnerability in widely deployed routers, prompting urgent CISA warnings and highlighting critical gaps in vendor security practices.
Severe fallout
"TP-Link Router Vulnerabilities Actively Exploited by Hackers, CISA Urges Immediate Disconnection - Thousands of widely used TP-Link routers—still being sold online with glowing reviews—have been found vulnerable to a critical command injection flaw that’s now under active exploitation by threat actors."
Neutral vendor page
"Security Advisory: Multiple Vulnerabilities in TP-Link Archer MR600 and TL-MR6400 (CVE-2026-76652 & CVE-2026-76653)"
Neutral technical disclosure
"TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr."
Neutral database
"Database CVE, CWE, CISA KEV & Vulnerability Intelligence | CVE Find"
Neutral breach tracker
"Recent Breaches: Latest Data Breach News & Live Tracker (2026)"
Neutral CVE database
"CVEs and Security Vulnerabilities - OpenCVE"
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.