CVE-2025-9014mediumCWE-20

CVE-2025-9014: falha de média gravidade em TP-Link Systems Inc. TL-WR841N v14

Null Pointer Dereference Vulnerability on TL-WR841N

Publicada em

Seguir esta CVE+ Monitorar TL-WR841N

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.5%
A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation.  A remote, unauthenticated attacker can exploit this flaw and cause Denial of Service on the web portal service.This issue affects TL-WR841N v14: before 250908.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Produtos afetados
TP-Link Systems Inc. · TL-WR841N v14
CVEs relacionadas — TP-Link Systems Inc. TL-WR841N v14

No mesmo produto, das mais perigosas para as menos.

CVE-2026-3227HIGHAuthenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840NEPSS 1.9%CVE-2026-9105MEDIUMAuthenticated Stack-Based Buffer Overflow in TP-Link TL-WR841N Web InterfaceEPSS 1.1%CVE-2026-3622HIGHDenial-of-Service Vulnerability in UPnP Component of TP Link's TL-WR841NEPSS 0.4%