CVE-2025-6151

8.2 highEPSS 5.0%

A vulnerability has been found in TP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknown functionality of the file /userRpm/WanSlaacCfgRpm.htm, which may lead to buffer overflow. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.

Severity

CVSS 4.0

8.2 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

EPSS: 5.0% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWEs: CWE-120, CWE-119
Published: 2025-06-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tp-link:tl-wr940n_firmware

References

https://github.com/WhereisDoujo/CVE/issues/7
https://vuldb.com/?ctiid.312626
https://vuldb.com/?id.312626
https://vuldb.com/?submit.593031
https://www.tp-link.com/us/support/faq/4536/

Check your stack JSON