CVE-2025-14739CWE-824

Uninitialized Pointer Vulnerability in TP-Link WR940N and WR941ND

Medium · published December 18, 2025

CVSS v4.0
6.8
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack

and potentially arbitrary code execution

under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316,

≤

WR941ND v6 3.16.9 Build 151203.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00215 · 11.2th percentile
Weakness
CWE-824 · Access of Uninitialized Pointer
Published
2025-12-18T18:02Z
EPSS history
Timeline
  • 18 DEC 18:02Z
    Uninitialized Pointer Vulnerability in TP-Link WR940N and WR941ND
    cvelistv5