CVE-2025-56565 identifies a vulnerability in the DD-WRT firmware as deployed on TP-Link TL-WR740N hardware versions 1 through 4. The firmware stores sensitive authentication credentials such as SSH private keys, dynamic DNS passwords, email notification credentials, and administrative passwords in cleartext within non-volatile memory. An attacker with physical access to the device can perform an SPI flash dump to extract these credentials. This exposure can lead to device compromise, infiltration of the connected network, and unauthorized access to dependent third-party services.

The vulnerability exposes critical authentication credentials in cleartext, enabling an attacker with physical access to the device to extract these credentials and compromise the device. This can result in unauthorized control over the device, network infiltration, and access to third-party services relying on these credentials.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict physical access to affected devices to prevent extraction of credentials from non-volatile memory.