CVE-2021-41653

9.8 criticalEPSS 76%

Critical (9.8) in tp-link tl-wr840n firmware. EPSS 76% chance of exploitation in the next 30 days.

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address input field.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 76% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2021-11-13
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

tp-link:tl-wr840n_firmware

References

https://k4m1ll0.com/cve-2021-41653.html
https://www.tp-link.com/us/press/security-advisory/
https://k4m1ll0.com/cve-2021-41653.html
https://www.tp-link.com/us/press/security-advisory/

Check your stack JSON