high8.8
CVE-2025-6541
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.
Impact
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Er706w Firmware | before 1.2.1 Version 1.2.1 |
| Tp-Link | Er706w-4g Firmware | before 1.2.1 Version 1.2.1 |
| Tp-Link | Er7212pc Firmware | before 2.1.3 Version 2.1.3 |
| Tp-Link | G36 Firmware | before 1.1.4 Version 1.1.4 |
| Tp-Link | G611 Firmware | before 1.2.2 Version 1.2.2 |
| Tp-Link | Fr365 Firmware | before 1.1.10 Version 1.1.10 |
| Tp-Link | Fr205 Firmware | before 1.0.3 Version 1.0.3 |
| Tp-Link | Fr307-M2 Firmware | before 1.2.5 Version 1.2.5 |
| Tp-Link | Er8411 Firmware | before 1.3.3 Version 1.3.3 |
| Tp-Link | Er7412-M2 Firmware | before 1.1.0 Version 1.1.0 |
| Tp-Link | Er707-M2 Firmware | before 1.3.1 Version 1.3.1 |
| Tp-Link | Er7206 Firmware | before 2.2.2 Version 2.2.2 |