CVE-2025-6151CWE-119CWE-120

TP-Link TL-WR940N, TL-WR841N WanSlaacCfgRpm.htm buffer overflow

High · published June 17, 2025

CVSS v4.0
8.2
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

A vulnerability has been found in

TP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknown

functionality of the file /userRpm/WanSlaacCfgRpm.htm, which may lead to buffer overflow. The attack may be

launched remotely. This vulnerability only affects products that are no longer

supported by the maintainer.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
EPSS
0.04952 · 92.1th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2025-06-17T01:00Z
EPSS history
Timeline
  • 17 JUN 01:00Z
    TP-Link TL-WR940N, TL-WR841N WanSlaacCfgRpm.htm buffer overflow
    cvelistv5