CVE-2025-6151

published 2025-06-17

CVE-2025-6151: A vulnerability has been found in TP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknown functionality of the file…

Priority P3 48 high 8.2 CVSS 4.0

AV N AC L AT N PR H UI N VC N VI N VA H SC N SI N SA H E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A vulnerability has been found in
TP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknown
functionality of the file /userRpm/WanSlaacCfgRpm.htm, which may lead to buffer overflow. The attack may be
launched remotely. This vulnerability only affects products that are no longer
supported by the maintainer.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
tp-link_systems_inc	tl-wr841n_v11	<= 160325	—
tp-link_systems_inc	tl-wr940n_v4	<= 160617	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119 CWE-120