CVE-2022-25060 PoC — Tp-link TL-WR840N 操作系统命令注入漏洞

Source

https://github.com/exploitwritter/CVE-2022-25060

Associated Vulnerability

Title: Tp-link TL-WR840N 操作系统命令注入漏洞 (CVE-2022-25060)
Description:TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.

Description

This script exploits a remote command execution vulnerability under the oal_startPing component in the TPLink WR840N router.

Readme

# CVE-2022-25060
This script exploits a remote command execution vulnerability under the oal_startPing component in the TPLink WR840N router.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →