High · published August 29, 2025
CVSS calls it high at 7.2. It is confirmed in active exploitation. It sits in the 98.5th percentile for exploit probability.
🚨 An authenticated remote command execution (RCE) vulnerability lurking in the Parental Control page of your TP-Link router could turn your internet fortress into an open playground for attackers! 🔥 Think of this vulnerability like a sneaky intruder who knows the secret code to your home and can now control everything from your thermostat to your security cameras. Just like a poorly secured home, these routers can be exploited if not properly managed! An attacker could execute commands remotely, granting them unauthorized control over your router. This means they could manipulate your network, intercept your data, or even redirect your internet traffic. The consequences could be absolutely devastating for your personal information and online privacy!
Think of this vulnerability like a sneaky intruder who knows the secret code to your home and can now control everything from your thermostat to your security cameras. Just like a poorly secured home, these routers can be exploited if not properly managed! This RCE vulnerability exploits the Parental Control page in the TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9 models, allowing authenticated users to send crafted commands to the router if the firmware is older than version 241108.
An attacker could execute commands remotely, granting them unauthorized control over your router. This means they could manipulate your network, intercept your data, or even redirect your internet traffic. The consequences could be absolutely devastating for your personal information and online privacy! It's critical to upgrade your router to the latest firmware version (241108 or later). If replacing your device isn't feasible right away, ensure you download and apply the necessary patches from the vendor's site. Remember, these models are at end-of-life (EOL), so consider investing in a new router for better security! You’ve got this! Follow these steps, tighten your router’s defenses, and keep your network secure! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| tp-link/tl-wr841n_firmware | < 241108 | 241108 |
| tp-link/tl-wr841nd_firmware | < 241108 | 241108 |
| tp-link/archer_c7_firmware | < 241108 | 241108 |