CVE-2025-53712 Details
Description
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_AP.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.
A buffer overflow vulnerability has been identified in the TP-Link TL-WR841N V11 router. This issue arises from inadequate input parameter validation in the WlanNetworkRpm_AP.htm file, potentially allowing remote attackers to cause a web service crash, leading to a denial-of-service condition. This vulnerability affects devices that are no longer supported by the manufacturer.
Users are advised to upgrade to a supported TP-Link model to receive automatic updates and ongoing protection. Instructions for selecting a new model can be found on the TP-Link website.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 29, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.tp-link.com/us/support/faq/4569/ | TPLink | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | TPLink |
| CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | TPLink |
Affected Products
| Product | Versions |
|---|---|
| tp-link tl-wr841n firmware | <= 160325 |
CPE
Remediation
| |
| tp-link tl-wr841n | 11 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | TPLink |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Aug 1, 2025 | Initial Analysis | [email protected] |
| Jul 29, 2025 | New CVE Received | TPLink |