HIGH
TP-Link TL-WR940N, TL-WR841N WanSlaacCfgRpm.htm buffer overflow
Published Jun 17, 2025
8.2
HIGHCVSS 4.0
EPSS 4.95%
Description
A vulnerability has been found in TP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknown functionality of the file /userRpm/WanSlaacCfgRpm.htm, which may lead to buffer overflow. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.
Affected products
-
- Version 0StatusaffectedConstraints<=160325
- Version
-
- Version 0StatusaffectedConstraints<=160617
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| TP-Link Systems INC. | TL-Wr841n V11 | unaffected |
| ||||||
| TP-Link Systems INC. | TL-Wr940n V4 | unaffected |
|
AND
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (6)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-18451 Advisory
- https://github.com/WhereisDoujo/CVE/issues/7 exploitIssue TrackingThird Party Advisory
- https://vuldb.com/?ctiid.312626 Permissions RequiredVDB Entry
- https://vuldb.com/?id.312626 Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.593031 Third Party AdvisoryVDB Entry
- https://www.tp-link.com/us/support/faq/4536/
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-18451 | Advisory | |
| https://github.com/WhereisDoujo/CVE/issues/7 | exploitIssue TrackingThird Party Advisory | |
| https://vuldb.com/?ctiid.312626 | Permissions RequiredVDB Entry | |
| https://vuldb.com/?id.312626 | Third Party AdvisoryVDB Entry | |
| https://vuldb.com/?submit.593031 | Third Party AdvisoryVDB Entry | |
| https://www.tp-link.com/us/support/faq/4536/ |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner TPLink
Published Jun 17, 2025
Updated Jul 15, 2025
Reserved Jun 15, 2025
Link CVE-2025-6151
CISA Vulnrichment
Updated Jun 17, 2025
ENISA EUVD
EUVD-2025-18451 Assigner VulDB
Published Jun 17, 2025
Updated Jul 15, 2025
Exploited since n/a
Link EUVD-2025-18451