Fr307-m2 Firmware (Tp-link) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2025-10-21. Vendor: Tp-link.

CVEs of Fr307-m2 Firmware

• CVE-2025-6542 - CVSS 9.8 (critical), 2025-10-21: An arbitrary OS command may be executed on the product by a remote unauthenticated attacker.
• CVE-2025-7851 - CVSS 9.8 (critical), 2025-10-21: An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
• CVE-2025-7850 - CVSS 9.3 (critical), 2025-10-21: A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.
• CVE-2025-6541 - CVSS 8.8 (high), 2025-10-21: An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.