Tp-link Tl-wr840n_firmware
21 CVEs affecting Tp-link Tl-wr840n_firmware. Latest disclosed: 2026-03-16. Critical: 6, High: 10.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-25064 | Critical | 9.8 | 2022-02-25 | TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr. |
CVE-2022-25061 | Critical | 9.8 | 2022-02-25 | TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute. |
CVE-2022-25060 | Critical | 9.8 | 2022-02-25 | TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing. |
CVE-2021-41653 | Critical | 9.8 | 2021-11-13 | The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payl… |
CVE-2020-36178 | Critical | 9.8 | 2021-01-06 | oal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N 6_EU_0.9.1_4.16 devices allows OS command injection because a raw string entered from the web interface (a… |
CVE-2018-11714 | Critical | 9.8 | 2018-06-04 | An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622… |
CVE-2023-39471 | High | 8.8 | 2024-05-03 | TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code… |
CVE-2019-15060 | High | 8.8 | 2019-08-22 | The traceroute function on the TP-Link TL-WR840N v4 router with firmware through 0.9.1 3.16 is vulnerable to remote code execution via a crafted payload in an… |
CVE-2022-25062 | High | 7.5 | 2022-02-25 | TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString. This vulnerability allows attackers to cause… |
CVE-2018-15840 | High | 7.5 | 2019-03-29 | TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking outage) via fragmented packets, as demonstrated by an "nmap -f" comma… |
CVE-2018-15172 | High | 7.5 | 2018-08-15 | TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header. |
CVE-2021-46122 | High | 7.2 | 2022-04-18 | Tp-Link TL-WR840N (EU) v6.20 Firmware (0.9.1 4.17 v0001.0 Build 201124 Rel.64328n) is vulnerable to Buffer Overflow via the Password reset feature. |
CVE-2022-26642 | High | 7.2 | 2022-03-28 | TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the X_TP_ClonedMACAddress parameter. |
CVE-2022-26641 | High | 7.2 | 2022-03-28 | TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter. |
CVE-2022-26640 | High | 7.2 | 2022-03-28 | TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the minAddress parameter. |
CVE-2022-26639 | High | 7.2 | 2022-03-28 | TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the DNSServers parameter. |
CVE-2026-3227 | Medium | 6.8 | 2026-03-16 | A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements us… |
CVE-2022-29402 | Medium | 6.8 | 2022-05-25 | TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port… |
CVE-2021-29280 | Medium | 6.4 | 2021-08-19 | In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow |
CVE-2019-12195 | Medium | 4.8 | 2019-05-24 | TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin log… |