What’s Vulnerable › Vulnerabilities

CVE-2022-26642

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-03-28 · updated 2026-06-17
• Weakness: CWE-120

Description

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the X_TP_ClonedMACAddress parameter.

Affected products

• TP-Link Tl-Wr840N Firmware: 0.9.1.4.16

References

• https://github.com/Quadron-Research-Lab/Hardware-IoT/blob/main/tp-link%20tl-wr840n_X_TP_ClonedMACAddress%3D.pdf
• https://github.com/Quadron-Research-Lab/Hardware-IoT/blob/main/tp-link%20tl-wr840n_X_TP_ClonedMACAddress%3D.pdf

Get alerted when CVE-2022-26642 or the next vulnerability affects your stack