High severity · published Jun 17, 2025
CVE-2025-6151
TP-Link TL-WR940N, TL-WR841N WanSlaacCfgRpm.htm buffer overflow
8.2
CVSS
5%
EPSS
No
On KEV
Description
A vulnerability has been found in
TP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknown
functionality of the file /userRpm/WanSlaacCfgRpm.htm, which may lead to buffer overflow. The attack may be
launched remotely. This vulnerability only affects products that are no longer
supported by the maintainer.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.0% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TV
TL-WR841N V11 · TP-Link Systems INC.
through 160325 · source: vendor
TV
TL-WR940N V4 · TP-Link Systems INC.
through 160617 · source: vendor
TF
Tl-wr940n Firmware · Tp-link
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-6151
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-6151
Exploit
https://github.com/WhereisDoujo/CVE/issues/7
Permissions Required
https://vuldb.com/?ctiid.312626
Third Party Advisory
https://vuldb.com/?id.312626
Third Party Advisory
https://vuldb.com/?submit.593031
www.tp-link.com
https://www.tp-link.com/us/support/faq/4536/
More from TL-WR841N V11
7.5
CVE-2025-53715
TP-Link TL-WR841N Wan6to4TunnelCfgRpm.htm buffer overflow
7.5
CVE-2025-53714
TP-Link TL-WR841N WzdWlanSiteSurveyRpm_AP.htm buffer overflow
7.5
CVE-2025-53713
TP-Link TL-WR841N WlanNetworkRpm_APC.htm buffer overflow
7.5
CVE-2025-53712
TP-Link TL-WR841N WlanNetworkRpm_AP.htm buffer overflow
7.5
CVE-2025-53711
TP-Link TL-WR841N, TL-WR842ND and TL-WR949N WlanNetworkRpm.htm buffer overflow