CVE-2022-25061: TP-Link Tl-WR840N Firmware

Critical severity, CVSS 9.8. EPSS: 58.7% chance of exploitation in the next 30 days.

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.

Affected products

• TP-Link Tl-WR840N Firmware: version 6.20_180709 only

Published 2022-02-25. Last modified 2026-07-09.