CVE-2025-14739

Uninitialized Pointer Vulnerability in TP-Link WR940N and WR941ND

State: Published
Severity: 6.8 Medium
Published: Dec 18, 2025
Updated: Feb 26, 2026
Reserved: Dec 15, 2025

Description

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack

and potentially arbitrary code execution

under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316,

≤

WR941ND v6 3.16.9 Build 151203.

Scores

CVSS	Score	Vector	Source
4.0	6.8 Medium	CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P	TPLink

Weaknesses

CWE-824 Access of Uninitialized Pointer

Affected Products

Product	Versions
WR940N and WR941NDTP-Link Systems Inc.	WR940N v5 3.20.1 Build 200316 and earlierAffected WR941ND v6 3.16.9 Build 151203 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.