CVE-2025-25899

A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'gw' parameter at /userRpm/WanDynamicIpV6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tp-link:tl-wr841nd_v11_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-wr841nd_v11:-:*:*:*:*:*:*:*

History

20 Jun 2025, 17:26

Type Values Removed Values Added
Summary
  • (es) Se descubrió una vulnerabilidad de desbordamiento de búfer en TP-Link TL-WR841ND V11 a través del parámetro 'gw' en /userRpm/WanDynamicIpV6CfgRpm.htm. Esta vulnerabilidad permite a los atacantes provocar una denegación de servicio (DoS) a través de un paquete manipulado.
CPE cpe:2.3:o:tp-link:tl-wr841nd_v11_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-wr841nd_v11:-:*:*:*:*:*:*:*
First Time Tp-link tl-wr841nd V11 Firmware
Tp-link tl-wr841nd V11
Tp-link
References () https://github.com/2664521593/mycve/blob/main/TP-Link/BOF_in_TP-Link_TL-WR841ND-V11_2.pdf - () https://github.com/2664521593/mycve/blob/main/TP-Link/BOF_in_TP-Link_TL-WR841ND-V11_2.pdf - Broken Link

13 Feb 2025, 20:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 3.5
CWE CWE-404

13 Feb 2025, 16:16

Type Values Removed Values Added
New CVE

Information

Published : 2025-02-13 16:16

Updated : 2025-06-20 17:26


NVD link : CVE-2025-25899

Mitre link : CVE-2025-25899

CVE.ORG link : CVE-2025-25899


JSON object : View

Products Affected

tp-link

  • tl-wr841nd_v11
  • tl-wr841nd_v11_firmware
CWE
CWE-404

Improper Resource Shutdown or Release