Executive summary
Public evidence documents CVE-2025-9377. This report does not assess any organization.
Technical analysis
TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
IOCs
No public IOC is available.
CVEs and affected products
TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability
ATT&CK mapping
No ATT&CK mapping is available.
Detection content
Sigma rules, YARA rules, Splunk SPL, and KQL detection logic.
Threat hunting
Hypothesis-driven hunt procedures and telemetry checklist.
Remediation
Containment actions, patching notes, and credential steps.
Historical relationships
No published historical relationship is available.
Timeline and change history
Confidence and caveats
1.0
⚠️ Public CTI only; no organizational exposure is asserted.
⚠️ CVSS and EPSS metadata were not present in the retrieved evidence payload.
📄
Intelligence Sources & Advisory Feeds
DFIR investigations, vendor research, advisory feeds & verified claims
1 reference
▼
Public evidence for CVE-2025-9377 with preserved provenance.
CVE-2025-9377 TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.