CVE-2025-14631

low-risk
Published 2026-01-07

A NULL Pointer Dereference vulnerability in TP-Link Archer BE400 V1(802.11 modules) allows  an adjacent attacker to cause a denial-of-service (DoS) by triggering a device reboot. This issue affects Archer BE400: xi 1.1.0 Build 20250710 rel.14914.

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.5/10 Medium
ADJACENT_NETWORK / LOW complexity

Affected Products (1)

Archer Be400 Firmware

Affected Vendors

Tp-Link

References (3)

Product https://www.tp-link.com/en/support/download/archer-be400/v1/#Firmware
Product https://www.tp-link.com/us/support/download/archer-be400/#Firmware
Vendor Advisory https://www.tp-link.com/us/support/faq/4871/
26
/ 100
low-risk
Severity 21/34 · High
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal