Analysis Summary

CVE-2025-40634

Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions. This vulnerability allows an attacker to execute arbitrary code on the device over LAN and WAN networks.

Impact

• Code Execution

Indicators of Compromise

CVE

• CVE-2025-40634

Affected Vendors

Remediation

Refer to TP-Link Website for patch, upgrade, or suggested workaround information.

TP-Link Website