CVE-2021-41653 is a critical remote code execution vulnerability affecting the TP-Link TL-WR840N EU v5 router, specifically its PING function. Attackers can exploit this by injecting a crafted payload into an IP address input field. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with no user interaction, allowing for complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, it has a high EPSS score and is actively targeted by botnets like Dark Mirai and Manga, with public Nuclei templates available for exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= tl-wr840n\(eu\)_v5_171211CPE matchmatch criteria | cpe:2.3:o:tp-link:tl-wr840n_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.