Critical severity9.8NVD Advisory· Published Feb 24, 2022· Updated Jun 17, 2026

CVE-2022-25074

Description

TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability allows unauthenticated attackers to execute arbitrary code.

Affected products

TP-Link/Tl Wr902ac Firmware
cpe:2.3:o:tp-link:tl-wr902ac_firmware:191209:*:*:*:*:*:*:*
TP-Link/TL-WR902ACdescription
TP-Link/TL-WR902ACllm-fuzzy
Range: V3_191209

Patches

Vulnerability mechanics

References

github.com/EPhaha/IOT_vuln/tree/main/TP-Link/TL-WR902ACnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.010
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000