What is the CVSS score of CVE-2025-41427?

CVE-2025-41427 has a CVSS 3.0 base score of 8.8 (High). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of TP-Link are affected by CVE-2025-41427?

A high-severity command injection vulnerability affects three WRC-X3000 router models, allowing authenticated users to execute arbitrary commands on affected devices.

How to fix or mitigate CVE-2025-41427?

Within 24 hours: Identify and inventory all affected WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN devices in your environment and restrict network access to the Connection Diagnostics page. Within 7 days: Implement network segmentation to limit administrative access to these devices and enforce multi-factor authentication for router management interfaces. Within 30 days: Monitor vendor communications for patch availability and develop a firmware upgrade plan; consider replacing devices if patches remain unavailable beyond 60 days.

TP-Link CVE-2025-41427

EUVD-2025-18999 HIGH

OS Command Injection (CWE-78)

2025-06-24 vultures@jpcert.or.jp

Authentication Bypass RCE Command Injection TP-Link

8.8

CVSS 3.0

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 22:36 euvd

EUVD-2025-18999

Analysis Generated

Mar 15, 2026 - 22:36 vuln.today

CVE Published

Jun 24, 2025 - 05:15 nvd

HIGH 8.8

DescriptionNVD

WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Connection Diagnostics page. If a remote authenticated attacker sends a specially crafted request to the affected product, an arbitrary OS command may be executed.

AnalysisAI

A command injection vulnerability in Connection Diagnostics page (CVSS 8.8). High severity vulnerability requiring prompt remediation.

Technical ContextAI

CWE-78 (OS Command Injection). CVSS 8.8 indicates high severity. Affects Connection Diagnostics page.

RemediationAI

Monitor vendor channels for patch availability. Implement input validation and WAF rules as interim mitigation.

More from same product – last 7 days

CVE-2026-3294 HIGH This Week

8.7 May 22

An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjac

CVE-2026-34126 HIGH This Week

7.3 May 28

Cleartext Bluetooth transmission in TP-Link Tapo L535E, P300, and D100C devices allows adjacent attackers to intercept a

CVE-2025-41427 vulnerability details – vuln.today

Back

TP-Link CVE-2025-41427

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More from same product – last 7 days

Share

External POC / Exploit Code