CVE-2022-29402

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-05-25 · updated 2026-06-17
Weakness: CWE-306

Description

TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port via a serial connection and execute commands as the root user without authentication.

Affected products

TP-Link Tl-Wr840N Firmware: all versions

References

https://k4m1ll0.com/cve-tplink-tlwr840N-uart-shell.html
https://k4m1ll0.com/cve-tplink-tlwr840N-uart-shell.html

Get alerted when CVE-2022-29402 or the next vulnerability affects your stack