An unauthenticated denial‑of‑service flaw exists in the HTTP service of certain TP‑Link routers. The flaw is triggered by a NULL‑pointer dereference when the device receives a specially crafted HTTP request, causing the HTTP service process to crash. Successful exploitation leaves the web management interface and any HTTP‑dependent functions temporarily unavailable, resulting in a service interruption but no compromise of data or system configuration.

TP‑Link Systems Inc. routers are affected. Specifically, the TL‑MR100 running firmware v3.2, the TL‑MR150 on firmware v3.2, the TL‑MR6400 with firmware v8.0, and the Archer MR600 using firmware v2. These firmware versions can be downloaded from TP‑Link’s support site.

With a CVSS score of 7.1, the vulnerability is rated as high severity. The EPSS score is not publicly available, and the vulnerability is not listed in CISA’s KEV catalog. The attack requires no authentication and can be performed by any host on the same local area network or adjacent network that can reach the router’s HTTP interface. Exploitation results in a crash of the HTTP service, allowing a temporary denial of service to users and administrators of the affected routers.