CVE-2022-25064

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr

published February 25, 2022

CVSS
โ€”
EPSS
36%
Percentile
98.5
In the wild
Unconfirmed
What it is

๐Ÿšจ A single function call could unleash chaos! The TP-LINK TL-WR840N has an RCE vulnerability that could let attackers execute arbitrary code with minimal effort. ๐Ÿ”ฅ Think of it like a tech-savvy burglar who finds a secret entrance that no one thought to lock โ€” the oal_wan6_setIpAddr function is that overlooked window, allowing anyone with the right knowledge to enter and take over. If exploited, an attacker could gain full control over your router, potentially allowing them to snoop on your network traffic, manipulate settings, or even launch attacks on other devices connected to the same network. It's a recipe for disaster, with your private data hanging in the balance!

Put simply

Think of it like a tech-savvy burglar who finds a secret entrance that no one thought to lock โ€” the oal_wan6_setIpAddr function is that overlooked window, allowing anyone with the right knowledge to enter and take over. The vulnerability arises from a failure to properly validate user input in the oal_wan6_setIpAddr function, enabling remote code execution by injecting malicious commands.

What to do

If exploited, an attacker could gain full control over your router, potentially allowing them to snoop on your network traffic, manipulate settings, or even launch attacks on other devices connected to the same network. It's a recipe for disaster, with your private data hanging in the balance! To safeguard your network, patch this vulnerability by upgrading the firmware of your TP-LINK TL-WR840N to the latest version. Always ensure that remote management features are disabled unless absolutely necessary, and regularly check for updates. You've got this! Keep your network secure and let those hackers know they can't mess with your router! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.36473 ยท 98.5th percentile
Published
2022-02-25T19:38Z
EPSS history
Timeline
  • 25 FEB 19:38Z
    TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr
    cvelistv5