CVE-2025-53711 - CVE House

Back to Database

Status published Medium CVE-2025-53711

TP-Link TL-WR841N, TL-WR842ND and TL-WR949N WlanNetworkRpm.htm buffer overflow

6.9 CVSS

Vulnerability Description

A vulnerability has been found in TP-Link TL-WR841N v11, TL-WR842ND v2 and TL-WR494N v3. The vulnerability exists in the /userRpm/WlanNetworkRpm.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53711

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.tp-link.com/us/support/faq/4569/

More from TP-Link Systems INC.

View All →

TP-Link TL-WR940N, TL-WR841N WanSlaacCfgRpm.htm buffer overflow

TP-Link TL-WR841N Wan6to4TunnelCfgRpm.htm buffer overflow

TP-Link TL-WR841N WzdWlanSiteSurveyRpm_AP.htm buffer overflow

TP-Link TL-WR841N WlanNetworkRpm_APC.htm buffer overflow

TP-Link TL-WR841N WlanNetworkRpm_AP.htm buffer overflow

Affected Vendor

TP-Link Systems INC.

View all reports →

Affected Software

TL-WR841N v11, TL-WR842ND v2, TL-WR949N v3

Vulnerable Versions:

0

Timeline

Official Publish: July 29th, 2025

Last Modified: March 19th, 2026

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-120 CWE-119

MITRE ATT&CK TTPs

T1203 Exploitation for Client Execution

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1055 Process Injection

Defense Evasion

T1105 Ingress Tool Transfer

Command and Control