CVE-2025-25901
Published: 13 February 2025
Description
A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11, triggered by the dnsserver1 and dnsserver2 parameters at /userRpm/WanSlaacCfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
Security Summary
CVE-2025-25901 is a buffer overflow vulnerability (CWE-787) affecting the TP-Link TL-WR841ND V11 router. The issue is triggered by crafted input to the dnsserver1 and dnsserver2 parameters in requests to the /userRpm/WanSlaacCfgRpm.htm endpoint. Published on 2025-02-13, it carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high-impact availability disruption with no confidentiality or integrity effects.
Unauthenticated attackers with network access to the device can exploit this vulnerability by sending a specially crafted packet targeting the vulnerable parameters. Successful exploitation leads to a Denial of Service (DoS) condition, potentially causing the router to crash or reboot and interrupting network services.
Further technical details, including exploit reproduction, are documented in the referenced advisory PDF at https://github.com/2664521593/mycve/blob/main/TP-Link/BOF_in_TP-Link_TL-WR841ND-V11_5.pdf. No vendor-specific patches or mitigations are detailed in the provided information.
Details
- CWE(s)