TP-Link TL-WR841N V14 UPnP Component Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the UPnP component of the TP-Link TL-WR841N V14 router. This issue arises from improper input validation, leading to an out-of-bounds read that can cause the UPnP service to crash. The vulnerability affects versions prior to EN_0.9.1 4.19 Build 260303 Rel.42399n and US_0.9.1.4.19 Build 260312 Rel. 49108n.

Impact

Exploitation of this vulnerability causes the UPnP service to crash, creating a denial-of-service condition on the device.

Remediation

Users are advised to download and update to the latest firmware version. The updated firmware can be downloaded from the TP-Link official website for both the English and US versions. As a temporary measure, UPnP can be disabled if operationally feasible.