BaselineWatch
Desk

CVE-2025-6541

8.6 high SSVC exploitation: none Analyzed

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 8.6 · tp-linkNVD modified 2026-10-18 21:10

Affected (CPE criteria) 26

  • cpe:2.3:o:tp-link:er706w_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er706w_firmware:1.2.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er706w-4g_firmware:1.2.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7212pc_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7212pc_firmware:2.1.3:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:g36_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:g36_firmware:1.1.4:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:g611_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:g611_firmware:1.2.2:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr365_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr365_firmware:1.1.10:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr205_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr205_firmware:1.0.3:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr307-m2_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:fr307-m2_firmware:1.2.5:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er8411_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er8411_firmware:1.3.3:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7412-m2_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7412-m2_firmware:1.1.0:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er707-m2_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er707-m2_firmware:1.3.1:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7206_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er7206_firmware:2.2.2:-:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er605_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:er605_firmware:2.3.1:-:*:*:*:*:*:*

References 4