CVE-2025-53715 - CVE House

Back to Database

Status published Medium CVE-2025-53715

TP-Link TL-WR841N Wan6to4TunnelCfgRpm.htm buffer overflow

6.9 CVSS

Vulnerability Description

A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/Wan6to4TunnelCfgRpm.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53715

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.tp-link.com/us/support/faq/4569/

More from TP-Link Systems INC.

View All →

TP-Link TL-WR940N, TL-WR841N WanSlaacCfgRpm.htm buffer overflow

TP-Link TL-WR841N WzdWlanSiteSurveyRpm_AP.htm buffer overflow

TP-Link TL-WR841N WlanNetworkRpm_APC.htm buffer overflow

TP-Link TL-WR841N WlanNetworkRpm_AP.htm buffer overflow

TP-Link TL-WR841N, TL-WR842ND and TL-WR949N WlanNetworkRpm.htm buffer overflow

Affected Vendor

TP-Link Systems INC.

View all reports →

Affected Software

TL-WR841N V11

Vulnerable Versions:

0

Timeline

Official Publish: July 29th, 2025

Last Modified: July 29th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1203 Exploitation for Client Execution

T1055 Process Injection

Defense Evasion

T1105 Ingress Tool Transfer

Command and Control