Buffer overflow in TP-Link Tl-Wr940n

CVE-2025-6151

A vulnerability has been found in TP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknown functionality of the file /userRpm/WanSlaacCfgRpm.htm, which may lead to buffer overflow. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.

Vulnerability class: Buffer Overflow

Published · last modified .

EPSS exploit prediction

EPSS: 0.050 (91.9th percentile), scored .

Low probability of exploitation in the next 30 days, but still tracked. 92nd percentile — 91.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2025-6151: rose from 0.037 to 0.050.

EPSS over last 30 days · oldest: 0.037 · newest: 0.050 · change: +0.012

Affected products

Weakness classification (CWE)

References