CVE-2018-25321CWE-352

TP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1_130719)

Medium · published May 17, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

TP-Link TL-WR720N wireless router contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious web requests. Attackers can modify port forwarding rules via VirtualServerRpm.htm or change WiFi security settings via WlanSecurityRpm.htm by tricking authenticated users into visiting attacker-controlled pages.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L
EPSS
0.00180 · 7.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2026-05-17T12:11Z
EPSS history
Timeline
  • 17 MAY 12:11Z
    TP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1_130719)
    cvelistv5