Back to Database
Status published
High
CVE-2025-14631
Null Pointer Dereference Vulnerability in Malformed 802.11 Frame of TP-Link Archer BE400
Vulnerability Description
A NULL Pointer Dereference vulnerability in TP-Link Archer BE400 V1(802.11 modules) allows an adjacent attacker to cause a denial-of-service (DoS) by triggering a device reboot. This issue affects Archer BE400: xi 1.1.0 Build 20250710 rel.14914.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-14631
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Kari Hulkko of Black Duck Cybersecurity Research Center (CyRC)
References
More from TP-Link Systems Inc.
View All →CVE-2025-9961
Authenticated RCE by CWMP binary
High
8.6
CVE-2025-9522
Blind Server-Side Request Forgery (SSRF) in Omada Controller
Medium
5.1
CVE-2025-9521
Password Confirmation Bypass in Omada Controller
Low
2.1
CVE-2025-9520
IDOR Leading to Owner Account Hijacking in Omada Controller
High
8.3
CVE-2025-9377
Authenticated RCE via Parental Control command injection
High
8.6
Affected Vendor
TP-Link Systems Inc.
View all reports →Affected Software
Archer BE400
Vulnerable Versions:
0
Timeline
Official Publish:
January 7th, 2026
Last Modified:
January 7th, 2026
Added to House:
July 22nd, 2026