Vulnerability Details CVE-2025-14737
Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2_160527,
≤
WA850RE V3_160922.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.0%
CVSS Severity
CVSS v3 Score 8.0
References
Products affected by CVE-2025-14737
-
cpe:2.3:h:tp-link:tl-wa850re:2
-
cpe:2.3:h:tp-link:tl-wa850re:3
-
cpe:2.3:o:tp-link:tl-wa850re_firmware:-