CVE-2021-41653: Code Injection
Published Nov 13, 2021
·Updated
The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)V5171211 is vulnerable to remote code execution via a crafted payload in an IP address input field.
Affected Software
4 affected components
TP-Link Tl-wr840n Firmware<=tl-wr840n\(eu\)_v5_171211
TP-Link TL-WR840N=v5
All of the following
TP-Link Tl-wr840n Firmware<=tl-wr840n\(eu\)_v5_171211
TP-Link TL-WR840N=v5
Event History
Nov 13, 2021
CVE Published
via MITRE·02:18 PM
Data Sourced
via MITRE·02:18 PM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-41653?
CVE-2021-41653 is a vulnerability in the PING function on the TP-Link TL-WR840N EU v5 router that allows remote code execution.
2
How severe is CVE-2021-41653?
CVE-2021-41653 has a severity rating of 9.8, which is considered critical.
3
Which software versions are affected by CVE-2021-41653?
The TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is affected by CVE-2021-41653.
4
How can CVE-2021-41653 be exploited?
CVE-2021-41653 can be exploited by sending a crafted payload in an IP address input field.
5
Is there a fix for CVE-2021-41653?
Please refer to the TP-Link security advisory for instructions on how to mitigate CVE-2021-41653.