CVE-2022-25064: TP-Link Tl-WR840N Firmware

Critical severity, CVSS 9.8. EPSS: 36.5% chance of exploitation in the next 30 days.

TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.

Affected products

• TP-Link Tl-WR840N Firmware: version 6.20_180709 only

Published 2022-02-25. Last modified 2026-07-09.