CVE-2025-6541: er706w firmware 1.2.1; +15 more affected products

Affected technology

er706w firmware · before 1.2.1 (exclusive)
tp-link

er706w firmware · 1.2.1
tp-link

er706w-4g firmware · before 1.2.1 (exclusive)
tp-link

er706w-4g firmware · 1.2.1
tp-link

er7212pc firmware · before 2.1.3 (exclusive)
tp-link

er7212pc firmware · 2.1.3
tp-link

g36 firmware · before 1.1.4 (exclusive)
tp-link

g36 firmware · 1.1.4
tp-link

g611 firmware · before 1.2.2 (exclusive)
tp-link

g611 firmware · 1.2.2
tp-link

fr365 firmware · before 1.1.10 (exclusive)
tp-link

fr365 firmware · 1.1.10
tp-link

fr205 firmware · before 1.0.3 (exclusive)
tp-link

fr205 firmware · 1.0.3
tp-link

fr307-m2 firmware · before 1.2.5 (exclusive)
tp-link

fr307-m2 firmware · 1.2.5
tp-link

er8411 firmware · before 1.3.3 (exclusive)
tp-link

er8411 firmware · 1.3.3
tp-link

er7412-m2 firmware · before 1.1.0 (exclusive)
tp-link

er7412-m2 firmware · 1.1.0
tp-link

er707-m2 firmware · before 1.3.1 (exclusive)
tp-link

er707-m2 firmware · 1.3.1
tp-link

er7206 firmware · before 2.2.2 (exclusive)
tp-link

er7206 firmware · 2.2.2
tp-link

er605 firmware · before 2.3.1 (exclusive)
tp-link

er605 firmware · 2.3.1
tp-link

Omada gateways · 0 to before ER8411 1.3.3, ER7412-M2 1.1.0, ER707-M2 1.3.1, ER7206 2.2.2, ER605 2.3.1, ER706W 1.2.1, ER706W-4G 1.2.1, ER7212PC 2.1.3
TP-Link Systems Inc.

Festa gateways · 0 to before FR365 1.1.10, FR205 1.0.3, FR307 1.2.5
TP-Link Systems Inc.

Omada Pro gateways · 0 to before G36 1.1.4, G611 1.2.2
TP-Link Systems Inc.

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · High privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 8.6/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.