TP-Link WR940N and WR941ND Uninitialized Pointer Vulnerability Allowing DoS and Potential Arbitrary Code Execution

A vulnerability has been identified in TP-Link WR940N (V5) and WR941ND (V6) routers, allowing local unauthenticated attackers to access an uninitialized pointer. This vulnerability can be exploited to execute a denial-of-service attack and potentially execute arbitrary code with root privileges. The issue arises during the processing of UPnP/SOAP SUBSCRIBE requests.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the device to crash, and in more severe cases, allow arbitrary code execution with root privileges, resulting in full system compromise.

Remediation

Users are advised to update to the latest firmware version. For WR940N V5, the latest version is 3.20.1 Build 220801. For WR941ND V6, the latest version is 3.16.9 Build 151203.