CVE-2025-40634

Publication date

2025-05-20 10:12:16

Family

INCIBE

State

PUBLISHED

Description

Stack-based buffer overflow vulnerability in the conn-indicator binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15 build 241203 rel61480. This vulnerability allows an attacker to execute arbitrary code on the device over LAN and WAN networks.