QwikSec

Security Database

CVE

CWE

Training

CVE-2025-14739

Published: Dec 18, 2025

Modified: Feb 26, 2026

PUBLISHED

Description

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316, ≤ WR941ND v6 3.16.9 Build 151203.

Vendor	Product	Versions
TP-Link Systems Inc.	WR940N and WR941ND	affected `0 - <= WR940N v5 3.20.1 Build 200316` affected `0 - <= WR941ND v6 3.16.9 Build 151203`

Weaknesses (CWE)

References

https://www.tp-link.com/us/support/download/tl-wr941nd/#Firmware

https://www.tp-link.com/us/support/download/tl-wr940n/v5/#Firmware

https://blog.exodusintel.com/2022/06/23/tp-link-wr940n-wr941nd-uninitialized-pointer-vulnerability/

https://www.tp-link.com/us/support/faq/4848/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.