Vulnerability Details CVE-2025-9014
A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation. A remote, unauthenticated attacker can exploit this flaw and cause Denial of Service on the web portal service.This issue affects TL-WR841N v14: before 250908.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.0%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2025-9014
-
cpe:2.3:h:tp-link:tl-wr841n:14
-
cpe:2.3:o:tp-link:tl-wr841n_firmware:-
-
cpe:2.3:o:tp-link:tl-wr841n_firmware:0.9.1_4.16
-
cpe:2.3:o:tp-link:tl-wr841n_firmware:0.9.1_4.18
-
cpe:2.3:o:tp-link:tl-wr841n_firmware:150310
-
cpe:2.3:o:tp-link:tl-wr841n_firmware:150616
-
cpe:2.3:o:tp-link:tl-wr841n_firmware:201216
-
cpe:2.3:o:tp-link:tl-wr841n_firmware:230506
-
cpe:2.3:o:tp-link:tl-wr841n_firmware:231119
-
cpe:2.3:o:tp-link:tl-wr841n_firmware:241108
-
cpe:2.3:o:tp-link:tl-wr841n_firmware:3.13.9
-
cpe:2.3:o:tp-link:tl-wr841n_firmware:3.16.9
-
cpe:2.3:o:tp-link:tl-wr841n_firmware:4.17.16_build_120201_rel.54750n