Severity
High
Analysis Summary
CVE-2025-40634
Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions. This vulnerability allows an attacker to execute arbitrary code on the device over LAN and WAN networks.
Impact
- Code Execution
Indicators of Compromise
CVE
CVE-2025-40634
Affected Vendors
- TP-Link
Affected Products
- TP-Link AX50 firmware - 1.0.15
Remediation
Refer to TP-Link Website for patch, upgrade, or suggested workaround information.