CVE-2025-40634CWE-121

Stack-based buffer overflow in TP-Link Archer AX50

Critical · published May 20, 2025

CVSS v4.0
9.2
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is

Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15 build 241203 rel61480. This vulnerability allows an attacker to execute arbitrary code on the device over LAN and WAN networks.

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00688 · 52.1th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-05-20T10:12Z
EPSS history
Timeline
  • 20 MAY 10:12Z
    Stack-based buffer overflow in TP-Link Archer AX50
    cvelistv5