CVE-2025-14739: Uninitialized Pointer Vulnerability in TP-Link WR940N and WR941ND
Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack
and potentially arbitrary code execution
under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316,
≤
WR941ND v6 3.16.9 Build 151203.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14739?
CVE-2025-14739 is considered a high severity vulnerability due to its potential to allow local unauthenticated attackers to execute DoS attacks and arbitrary code execution.
How do I fix CVE-2025-14739?
To fix CVE-2025-14739, update your TP-Link WR940N or WR941ND devices to the latest firmware versions provided by TP-Link.
Which devices are affected by CVE-2025-14739?
CVE-2025-14739 affects TP-Link devices WR940N versions up to 3.20.1 and WR941ND versions up to 3.16.9.
Can CVE-2025-14739 be exploited remotely?
No, CVE-2025-14739 requires local access for exploitation, making it a local vulnerability.
What potential impact does CVE-2025-14739 have on my network?
CVE-2025-14739 can lead to denial of service and arbitrary code execution under the context of the ‘root’ user, compromising device integrity.