CVE-2022-25064 PoC — Tp-link TL-WR840N 操作系统命令注入漏洞

Source

https://github.com/exploitwritter/CVE-2022-25064

Associated Vulnerability

Title: Tp-link TL-WR840N 操作系统命令注入漏洞 (CVE-2022-25064)
Description:TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.

Description

This script exploits a remote command execution vulnerability in the TPLink WR840N router, using the configure function IPv6 protocol.

Readme

# CVE-2022-25064
This script exploits a OS Command Injection vulnerability in the TPLink WR840N router, using the configure function IPv6 protocol.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →