CVE-2025-14739mediumCWE-824

CVE-2025-14739: medium-severity vulnerability in TP-Link Systems Inc. WR940N and WR941ND

Uninitialized Pointer Vulnerability in TP-Link WR940N and WR941ND

Published · Updated

Follow this CVE+ Monitor WR940N and WR941ND

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.2%
Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316, ≤ WR941ND v6 3.16.9 Build 151203.
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
TP-Link Systems Inc. · WR940N and WR941ND