PT-2025-7112 · Tp Link · Tp-Link Tl-Wr841Nd

Published 2025-02-04 · Updated 2025-02-17 · CVE-2025-25898

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR841ND version V11

Description: A buffer overflow issue was discovered via the pskSecret parameter at the "/userRpm/WlanSecurityRpm.htm" API endpoint. This issue allows attackers to cause a Denial of Service (DoS) via a crafted packet.

Recommendations: For TP-Link TL-WR841ND version V11, as a temporary workaround, consider disabling access to the "/userRpm/WlanSecurityRpm.htm" API endpoint or restricting the use of the pskSecret parameter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-120

Related Identifiers

BDU:2025-01877

CVE-2025-25898

Affected Products

Tp-Link Tl-Wr841Nd

References · 9

• 🔥 https://github.com/2664521593/mycve/blob/main/TP-Link/BOF_in_TP-Link_TL-WR841ND-V11_1.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-25898 · Security Note
• https://bdu.fstec.ru/vul/2025-01877 · Security Note
• https://twitter.com/CVEnew/status/1890150883138367724 · Twitter Post
• https://github.com/advisories/GHSA-749g-9h7c-6xjr · Note
• https://t.me/cvedetector/18030 · Telegram Post
• https://twitter.com/WolfgangSesin/status/1890082131570762084 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1890202879178211819 · Twitter Post
• https://twitter.com/cybercronai/status/1891473226372387286 · Twitter Post