CVE-2025-40634

Vulnerability Description

Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15 build 241203 rel61480. This vulnerability allows an attacker to execute arbitrary code on the device over LAN and WAN networks.

Related Weaknesses (CWE)

CWE-121

References

https://www.incibe.es/en/incibe-cert/notices/aviso/stack-based-buffer-overflow-t

FAQ

What is CVE-2025-40634?

CVE-2025-40634 is a documented vulnerability. Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15 build 241203 rel61480. This vulnerabili...

How severe is CVE-2025-40634?

CVSS scoring is not yet available for CVE-2025-40634. Check NVD for updates.

Is there a patch for CVE-2025-40634?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.