TP-Link Tl-WA850RE Firmware vulnerabilities
6 CVEs affecting TP-Link Tl-WA850RE Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-14738, published 2025-12-18.
More from TP-Link.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2018-12692, published 2018-06-23. High severity, CVSS 8.8. EPSS: 28.8% chance of exploitation in the next 30 days. TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the wps_setup_pin parameter to…
- CVE-2018-12693, published 2018-06-23. Medium severity, CVSS 6.5. EPSS: 15.8% chance of exploitation in the next 30 days. Stack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to cause a denial of service (outage) via a long type parameter to…
- CVE-2018-12694, published 2018-06-23. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote attackers to cause a denial of service (reboot) via data/reboot.json.
- CVE-2022-22922, published 2022-02-18. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, allowing attackers to gain administrative privileges.
- CVE-2025-14737, published 2025-12-18. High severity, CVSS 8.0. EPSS: 0.9% chance of exploitation in the next 30 days. Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.
- CVE-2025-14738, published 2025-12-18. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE…