CVE-2025-14739 MEDIUM

CVE-2025-14739: Uninitialized Pointer Vulnerability in TP-Link WR940N and WR941ND

Vendor Tp-Link Systems Inc.
Product WR940N and WR941ND
Weakness CWE-824
Published December 18, 2025
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

6.8/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316, ≤ WR941ND v6 3.16.9 Build 151203.

Key dates

02Disclosure timeline

December 18, 2025 CVE published
February 26, 2026 Record updated