Vulnerability Details CVE-2022-25060
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.84
EPSS Ranking 99.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
- http://router.com
- http://tp-link.com
- https://east-trowel-102.notion.site/CVE-2021-XXXX-Injection-of-commands-through-object-oal_startPing-EN-939c748c5f244504899477114b1ca1cf
- http://router.com
- http://tp-link.com
- https://east-trowel-102.notion.site/CVE-2021-XXXX-Injection-of-commands-through-object-oal_startPing-EN-939c748c5f244504899477114b1ca1cf
Products affected by CVE-2022-25060
-
cpe:2.3:h:tp-link:tl-wr840n:-
-
cpe:2.3:o:tp-link:tl-wr840n_firmware:6.20_180709