critical9.8
CVE-2025-6542
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker.
Impact
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Er8411 Firmware | before 1.3.3 Version 1.3.3 |
| Tp-Link | Er7412-M2 Firmware | before 1.1.0 Version 1.1.0 |
| Tp-Link | Er707-M2 Firmware | before 1.3.1 Version 1.3.1 |
| Tp-Link | Er7206 Firmware | before 2.2.2 Version 2.2.2 |
| Tp-Link | Er605 Firmware | before 2.3.1 Version 2.3.1 |
| Tp-Link | Er706w Firmware | before 1.2.1 Version 1.2.1 |
| Tp-Link | Er706w-4g Firmware | before 1.2.1 Version 1.2.1 |
| Tp-Link | Er7212pc Firmware | before 2.1.3 Version 2.1.3 |
| Tp-Link | G36 Firmware | before 1.1.4 Version 1.1.4 |
| Tp-Link | G611 Firmware | before 1.2.2 Version 1.2.2 |
| Tp-Link | Fr365 Firmware | before 1.1.10 Version 1.1.10 |
| Tp-Link | Fr205 Firmware | before 1.0.3 Version 1.0.3 |