What is CVE-2025-40634?

CVE-2025-40634 is a vulnerability in TP-Link Link Archer Ax50, classified under Stack-based Buffer Overflow. Published 2025-05-20.

Is CVE-2025-40634 known to be exploited?

6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in TP-Link Link Archer Ax50

CVE-2025-40634

Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15 build 241203 rel61480. This vulnerability allows an attacker to execute arbitrary code on the device over LAN and WAN networks.

Vulnerability class: Buffer Overflow

EPSS: 0.006 (44.9th percentile) — read the EPSS interpretation.

Affected products

Tp-link Link Archer Ax50 — versions 0

Weakness classification (CWE)

CWE-121 — Stack-based Buffer Overflow

Public proof-of-concept exploits

hacefresko/CVE-2025-40634
ARPSyndicate/cve-scores
PuddinCat/GithubRepoSpider
nomi-sec/PoC-in-GitHub
tanjiti/sec_
zxarj/wxvl

References

cve-coordination@incibe.es

Frequently asked questions

What is CVE-2025-40634?: CVE-2025-40634 is a vulnerability in TP-Link Link Archer Ax50, classified under Stack-based Buffer Overflow. Published 2025-05-20.
Is CVE-2025-40634 known to be exploited?: 6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.