High severity · published Jun 17, 2025
CVE-2025-6151
A vulnerability has been found in TP-Link TL-WR940N V4 and TL-WR841N V11
8.2
CVSS
5%
EPSS
No
On KEV
Description
A vulnerability has been found in
TP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknown
functionality of the file /userRpm/WanSlaacCfgRpm.htm, which may lead to buffer overflow. The attack may be
launched remotely. This vulnerability only affects products that are no longer
supported by the maintainer.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.0% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TF
Tl-wr940n Firmware · Tp-link
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-6151
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-6151
Exploit
https://github.com/WhereisDoujo/CVE/issues/7
Permissions Required
https://vuldb.com/?ctiid.312626
Third Party Advisory
https://vuldb.com/?id.312626
Third Party Advisory
https://vuldb.com/?submit.593031
www.tp-link.com
https://www.tp-link.com/us/support/faq/4536/
More from Tl-wr940n Firmware
8.8
CVE-2023-33538
TP-Link Multiple Routers Command Injection Vulnerability
6.5
CVE-2023-50224
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
9.9
CVE-2023-36355
TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm
8.8
CVE-2022-43636
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6_211111 3.20.1(US) routers
8.8
CVE-2022-24355
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers