Uninitialized Pointer Vulnerability in TP-Link WR940N and WR941ND_CVE-2025-14739

6.8 / 10

MEDIUM

CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Description

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack

and potentially arbitrary code execution

under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316,

≤

WR941ND v6 3.16.9 Build 151203.

Basic Information

ID CVE-2025-14739

Source TPLink

Published Dec 18, 2025 at 18:02

Affected Product

Vendor TP-Link Systems Inc.

Product WR940N and WR941ND

Affected Versions TP-Link Systems Inc. WR940N and WR941ND 0
TP-Link Systems Inc. WR940N and WR941ND 0

CWE Classification

CWE-824

References

{
    "lastseen": "",
    "description": "Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows\u00a0local unauthenticated attackers the ability to execute DoS attack \n\nand potentially arbitrary code execution\n\nunder the context of the \u2018root\u2019 user.This issue affects WR940N and WR941ND: \u2264 WR940N v5 3.20.1 Build 200316, \n\n\u2264\n\n WR941ND v6 3.16.9 Build 151203.",
    "published": "2025-12-18T18:02:04.697Z",
    "modified": "2025-12-18T18:02:04.697Z",
    "type": "cve",
    "title": "Uninitialized Pointer Vulnerability in TP-Link WR940N and WR941ND",
    "source": "TPLink",
    "references": "https://www.tp-link.com/us/support/download/tl-wr941nd/#Firmware\nhttps://www.tp-link.com/us/support/download/tl-wr940n/v5/#Firmware\nhttps://blog.exodusintel.com/2022/06/23/tp-link-wr940n-wr941nd-uninitialized-pointer-vulnerability/\nhttps://www.tp-link.com/us/support/faq/4848/",
    "id": "CVE-2025-14739",
    "bulletinFamily": "",
    "cwe": [
        "CWE-824"
    ],
    "cvelist": null,
    "sourceData": "TP-Link Systems Inc. WR940N and WR941ND 0\nTP-Link Systems Inc. WR940N and WR941ND 0",
    "sourceHref": "",
    "cvss": {
        "score": 6.8,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "WR940N and WR941ND",
    "version": "0",
    "vendor": "TP-Link Systems Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}