TP-Link ER7206
Approved changes feed: RSS · Atom
cpe:2.3:h:tp-link:er7206:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Tp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e) |
|---|---|
| Product | Er7206 (ad3f7f0b-2e71-59bc-b8f6-37fde7f65720) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-7851 |
not_vulnerable | 2026-06-08 07:45:18.392473 |
Unauthorized root access via debug functionality
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
Published: 2025-10-21T00:29:05.809Z
Updated: 2025-10-24T17:00:06.753Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7850 |
not_vulnerable | 2026-06-08 07:45:18.364328 |
Authenticated OS command execution
A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.
Published: 2025-10-21T00:28:11.589Z
Updated: 2025-10-24T16:59:25.310Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6542 |
not_vulnerable | 2026-06-08 07:43:15.302484 |
OS command injection in multiple parameters
An arbitrary OS command may be executed on the product by a remote unauthenticated attacker.
Published: 2025-10-21T00:23:08.908Z
Updated: 2025-10-21T14:15:13.774Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6541 |
not_vulnerable | 2026-06-08 07:43:15.298282 |
OS command injection using information obtained from the web management interface
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.
Published: 2025-10-21T00:21:42.535Z
Updated: 2025-10-21T13:57:51.728Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21827 |
not_vulnerable | 2026-06-08 06:27:36.749931 |
Details available
HIGH (7.2)
A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.57421. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger this vulnerability.
Published: 2024-06-25T14:01:26.644Z
Updated: 2025-11-04T17:14:15.827Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47618 |
not_vulnerable | 2026-06-08 06:14:25.203233 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47617 |
not_vulnerable | 2026-06-08 06:14:25.202454 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47209 |
not_vulnerable | 2026-06-08 06:14:24.259164 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47167 |
not_vulnerable | 2026-06-08 06:14:24.136601 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46683 |
not_vulnerable | 2026-06-08 06:14:22.750362 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43482 |
not_vulnerable | 2026-06-08 06:12:31.601492 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42664 |
not_vulnerable | 2026-06-08 06:11:08.858137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36498 |
not_vulnerable | 2026-06-08 06:08:12.088749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.