{"id":"CVE-2022-25064","title":"TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.","summary":"TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"vendor":"tp-link","product":"tl-wr840n_firmware","affected":["tl-wr840n_firmware = 6.20_180709"],"published":"2022-02-25","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-25064","references":[{"url":"https://east-trowel-102.notion.site/CVE-2021-XXXX-rce-via-crafted-payload-in-an-ipv6-address-input-field-hidden-EN-98e24b6f841043fba17ec4627c34f5d1","label":"cve@mitre.org"},{"url":"http://router.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tp-link.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://east-trowel-102.notion.site/CVE-2021-XXXX-rce-via-crafted-payload-in-an-ipv6-address-input-field-hidden-EN-98e24b6f841043fba17ec4627c34f5d1","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.36473,"epssPercentile":0.98467,"ingestedAt":"2026-07-06T02:09:23.248Z","exploits":{"github":2,"githubRepos":["https://github.com/exploitwritter/CVE-2022-25064","https://github.com/Mr-xn/CVE-2022-25064"],"checkedAt":"2026-09-21T15:25:15.031Z"},"exploitAvailable":true,"slug":"CVE-2022-25064","body":"## Overview\n\nTP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.\n\n## Affected\n\n- `tl-wr840n_firmware = 6.20_180709`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":73,"depthScoreParts":{"impact":53.9,"likelihood":7.3,"exploitation":12,"ransomware":0},"changes":[{"seq":4603,"id":"CVE-2022-25064","ts":1788887193660,"field":"exploit_available","old":"false","new":"true"},{"seq":3486,"id":"CVE-2022-25064","ts":1788886310075,"field":"exploit_available","old":"true","new":"false"},{"seq":2340,"id":"CVE-2022-25064","ts":1788882979592,"field":"exploit_available","old":"false","new":"true"},{"seq":1369,"id":"CVE-2022-25064","ts":1788882392177,"field":"exploit_available","old":"true","new":"false"},{"seq":483,"id":"CVE-2022-25064","ts":1788881827804,"field":"exploit_available","old":"false","new":"true"}]}