← CVE Intelligence

CVE-2025-6541

OS command injection using information obtained from the web management interface PUBLISHED

Description (CNA)

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.

Affected (CNA)

Vendor / productVersions
TP-Link Systems Inc. / Omada gatewaysaffected 0 before ER8411 1.3.3, ER7412-M2 1.1.0, ER707-M2 1.3.1, ER7206 2.2.2, ER605 2.3.1, ER706W 1.2.1, ER706W-4G 1.2.1, ER7212PC 2.1.3
TP-Link Systems Inc. / Festa gatewaysaffected 0 before FR365 1.1.10, FR205 1.0.3, FR307 1.2.5
TP-Link Systems Inc. / Omada Pro gatewaysaffected 0 before G36 1.1.4, G611 1.2.2

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.