EUVD-2025-208944
GHSA-7gjx-r4jj-vjx7
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4DescriptionCVE.org
A Denial-of-Service (DoS) vulnerability in the httpd component of TP-Link's TD-W8961N v4.0 due to improper input sanitization, allows crafted requests to trigger a processing error that causes the httpd service to crash. Successful exploitation may allow the attacker to cause service interruption, resulting in a DoS condition.
AnalysisAI
A Denial-of-Service vulnerability exists in the httpd component of TP-Link TD-W8961N v4.0 routers, caused by improper input sanitization (CWE-20) that allows attackers to craft malicious requests triggering httpd service crashes. The vulnerability enables service interruption and network unavailability for affected users. Although no CVSS score or EPSS metric is publicly available, a vendor patch is already available, indicating acknowledgment of the issue's severity and exploitability.
Technical ContextAI
The vulnerability resides in the httpd (HTTP daemon) web service component of TP-Link's TD-W8961N wireless ADSL router (CPE: cpe:2.3:a:tp-link_systems_inc.:td-w8961n_v4.0:*:*:*:*:*:*:*:*). The root cause is classified as CWE-20 (Improper Input Validation), meaning the httpd service fails to properly sanitize or validate incoming HTTP request data before processing. When specially crafted requests are submitted, they bypass input validation checks and trigger an unhandled processing error within the daemon, leading to immediate service termination. This is a common vulnerability pattern in embedded device firmware where lightweight HTTP servers lack robust input handling mechanisms.
RemediationAI
Immediately upgrade the affected TP-Link TD-W8961N v4.0 router firmware to the latest patched version available from the official TP-Link download portal (https://www.tp-link.com/en/support/download/td-w8961n/v4/#Firmware). The patching process typically involves downloading the firmware image, accessing the device's web administration panel, and performing a firmware upgrade operation; the device will reboot automatically. Until patching is completed, temporarily mitigate risk by disabling remote web administration (ensure the httpd service only listens on the local LAN IP, not the WAN interface) and restricting administrative access via ACLs or firewall rules to trusted IP ranges only. Alternatively, if the router remains behind a carrier-grade NAT or corporate firewall that blocks unsolicited inbound connections, the risk is substantially reduced; however, patching should not be delayed indefinitely. Consult TP-Link's FAQ (https://www.tp-link.com/us/support/faq/5028/) for additional guidance specific to this vulnerability.
Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before
cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models be
The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to r
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_set
Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in c
Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_sta
TP-Link Archer C7 and TL-WR841N routers contain an authenticated remote command execution vulnerability in the Parental
A vulnerability in the TP-Link Archer c20 router with firmware version V6.6_230412 and earlier permits unauthorized indi
Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the functio
In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote
Same weakness CWE-20 – Improper Input Validation
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today