CVE-2025-9377

Katalog CVE

CVSS 7.2 · High KEV · sudah dieksploitasi EPSS 37,7%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada tp-link tl-wr841n firmware, tp-link tl-wr841nd firmware +1 lainnya. Skor CVSS 3.1 7.2 (High) menurut NVD. Masuk katalog KEV CISA pada 3 September 2025, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9. This issue affects Archer C7(EU) V2: before 241108 and TL-WR841N/ND(MS) V9: before 241108. Both products have reached the status of EOL (end-of-life). It's recommending to purchase the new product to ensure better performance and security. If replacement is not an option in the short term, please use the second reference link to download and install the patch(es).

Rincian

Terbit di NVD

29 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

37,7% peluang dieksploitasi; lebih tinggi dari 98,5% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability

Masuk KEV

3 September 2025

Tenggat CISA

24 September 2025 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.tp-link.com/us/support/faq/4365/ advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9377 pemerintah AS
• https://www.tp-link.com/us/support/faq/4308/ product