{"id":"CVE-2022-25061","title":"TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.","summary":"TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"vendor":"tp-link","product":"tl-wr840n_firmware","affected":["tl-wr840n_firmware = 6.20_180709"],"published":"2022-02-25","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-25061","references":[{"url":"https://east-trowel-102.notion.site/CVE-2021-XXXX-Injection-of-commands-through-object-oal_setIp6DefaultRoute-EN-ddf9c1db199d49829269147ada6cb312","label":"cve@mitre.org"},{"url":"http://router.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tp-link.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://east-trowel-102.notion.site/CVE-2021-XXXX-Injection-of-commands-through-object-oal_setIp6DefaultRoute-EN-ddf9c1db199d49829269147ada6cb312","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.58701,"epssPercentile":0.99086,"ingestedAt":"2026-07-06T02:09:23.219Z","exploits":{"github":1,"githubRepos":["https://github.com/exploitwritter/CVE-2022-25061"],"nuclei":["CVE-2022-25061"],"checkedAt":"2026-09-21T15:25:14.869Z"},"exploitAvailable":true,"slug":"CVE-2022-25061","body":"## Overview\n\nTP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.\n\n## Affected\n\n- `tl-wr840n_firmware = 6.20_180709`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":78,"depthScoreParts":{"impact":53.9,"likelihood":11.7,"exploitation":12,"ransomware":0},"changes":[{"seq":4601,"id":"CVE-2022-25061","ts":1788887193650,"field":"exploit_available","old":"false","new":"true"},{"seq":3484,"id":"CVE-2022-25061","ts":1788886310065,"field":"exploit_available","old":"true","new":"false"},{"seq":2338,"id":"CVE-2022-25061","ts":1788882979583,"field":"exploit_available","old":"false","new":"true"},{"seq":1367,"id":"CVE-2022-25061","ts":1788882392167,"field":"exploit_available","old":"true","new":"false"},{"seq":481,"id":"CVE-2022-25061","ts":1788881827794,"field":"exploit_available","old":"false","new":"true"},{"seq":80,"id":"CVE-2022-25061","ts":1784920441393,"field":"epss","old":"0.66934","new":"0.59324"},{"seq":60,"id":"CVE-2022-25061","ts":1783623109854,"field":"epss","old":"0.72495","new":"0.66934"}]}