CVE-2024-54887 describes a buffer overflow vulnerability in TP-Link TL-WR940N V3 and V4 routers running firmware version 3.16.9 or earlier. The vulnerability exists in the handling of the dnsserver1 and dnsserver2 parameters on the /userRpm/Wan6to4TunnelCfgRpm.htm endpoint. An attacker with authentication can exploit this flaw to execute arbitrary code on the device with root-level privileges. The CVSS 3.1 base score is 8.0, indicating high impact on confidentiality, integrity, and availability. No known exploits in the wild or vendor patches are currently documented.

Successful exploitation allows an authenticated attacker to execute arbitrary code as root on the affected device, compromising device confidentiality, integrity, and availability. This can lead to full control over the router, potentially affecting network security and connected devices.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the device's management interface to trusted users only and monitor for unauthorized access attempts. Avoid using affected firmware versions if possible.