Description
TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port via a serial connection and execute commands as the root user without authentication.
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://k4m1ll0.com/cve-tplink-tlwr840N-uart-shell.html
Scores
CVSS v3
6.8
EPSS
0.0007
EPSS Percentile
21.6%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-306
Status
published
Products (1)
tp-link/tl-wr840n_firmware
Published
May 25, 2022
Tracked Since
Feb 18, 2026