What’s Vulnerable › Vulnerabilities

CVE-2025-5875: TP-LINK Technologies TL-IPC544EP-W4 main sub_69064 buffer overflow

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-06-09 · updated 2026-06-17
• Weakness: CWE-119

Description

A vulnerability classified as critical has been found in TP-LINK Technologies TL-IPC544EP-W4 1.0.9 Build 240428 Rel 69493n. Affected is the function sub_69064 of the file /bin/main. The manipulation of the argument text leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

• TP-LINK Technologies TL-IPC544EP-W4: 1.0.9-build240428_rel69493n

References

• https://locrian-lightning-dc7.notion.site/TL-IPC544EP-W4-1f98e5e2b1a280ae9862d49391d95651
• https://vuldb.com/?ctiid.311634
• https://vuldb.com/?id.311634
• https://vuldb.com/?submit.581366
• https://www.tp-link.cn/
• https://locrian-lightning-dc7.notion.site/TL-IPC544EP-W4-1f98e5e2b1a280ae9862d49391d95651

Get alerted when CVE-2025-5875 or the next vulnerability affects your stack