PT-2025-31238 · Tp Link · Tp-Link Tl-Wr841N

Published 2025-07-28 · Updated 2025-07-29 · CVE-2025-53714

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR841N version V11

Description A vulnerability exists in the /userRpm/WzdWlanSiteSurveyRpm AP.htm file due to missing input parameter validation, which may lead to a buffer overflow. This can cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

BDU:2025-10690

CVE-2025-53714

Affected Products

Tp-Link Tl-Wr841N

References · 6

• https://osv.dev/vulnerability/CVE-2025-53714 · Vendor Advisory
• https://tp-link.com/us/support/faq/4569 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53714 · Security Note
• https://bdu.fstec.ru/vul/2025-10690 · Security Note
• https://twitter.com/VulmonFeeds/status/1950300275899548086 · Twitter Post
• https://twitter.com/CVEnew/status/1950261057810804915 · Twitter Post