Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2025-14739 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316, ≤ WR941ND v6 3.16.9 Build 151203.

Metrics

CVSS 3.x Severity and Vector Strings:

NDDVolerionCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://blog.exodusintel.com/2022/06/23/tp-link-wr940n-wr941nd-uninitialized-pointer-vulnerability/ TPLinkAdvisoryTechnical Description
https://www.tp-link.com/us/support/download/tl-wr940n/v5/#Firmware TPLinkProductVendor
https://www.tp-link.com/us/support/download/tl-wr941nd/#Firmware TPLinkProductVendor
https://www.tp-link.com/us/support/faq/4848/ TPLinkAdvisoryBundleRemedyVendor

Weakness Enumeration

CWE-IDCWE NameSource
CWE-824Access of Uninitialized PointerTPLink

Affected Products

ProductVersions
TP-Link WR940N
All versions

CPE

  • cpe:2.3:h:tp-link:wr940n:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:wr940n_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr940n:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:tl-wr940n_firmware:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
TP-Link WR941ND
All versions

CPE

  • cpe:2.3:h:tp-link:tl-wr941nd:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:tl-wr941nd_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr941nd_v2:*:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr941nd_v3:*:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr941nd_v4:*:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr741nd:*:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr741n:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
TP-Link WA850RE
All versions

CPE

  • cpe:2.3:h:tp-link:tl-wa850re:*:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:tl-wa850re_firmware:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
TP-Link WA940N
All versions

CPE

  • No CPEs found in CPE dictionary for this product.

Remediation

  • No remediation found in references.

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2025-14739
NVD Published Date:
Dec 18, 2025
NVD Last Modified:
Jun 17, 2026
Source:
TPLink