CVEvulnerability

CVE-2023-50224

6.5 MEDIUM Known exploited Published 2024-05-03 Modified 2026-09-03 Official page ↗

CISA Known Exploited Vulnerability

TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability — TP-Link TL-WR841N

TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Added to KEV
2025-09-03
Remediation due
2025-09-24
Ransomware use
Unknown
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes
https://www.tp-link.com/us/support/faq/4308/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-50224
Status
Analyzed
Published
2024-05-03
Last modified
2026-09-03
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-290

Description

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

Affected configurations

• tp-link tl-wr841n firmware • tp-link tl-wr841n firmware (>= 11 150616 < 11 211209) • tp-link tl-wr841n firmware (>= 12 160624 < 12 230317) • tp-link mr6400 firmware • tp-link tl-wdr3600 firmware • tp-link tl-wdr4300 firmware • tp-link wdr3500 firmware • tp-link tl-wr710n firmware • tp-link tl-wr740n firmware • tp-link tl-wr741nd firmware • tp-link tl-wr743nd firmware • tp-link wr749n firmware • tp-link mr3420 firmware • tp-link wr1043nd firmware • tp-link wr1045nd firmware • tp-link wr802n firmware • tp-link tl-wr810n firmware • tp-link tl-wr840n firmware • tp-link wr841hp firmware • tp-link tl-wr841nd firmware • tp-link wr842n firmware • tp-link wr842nd firmware • tp-link tl-wr843n firmware • tp-link wr845n firmware • tp-link wr945n firmware • tp-link tl-mr3020 firmware • tp-link tl-mr3220 firmware • tp-link wa701nd firmware • tp-link wa801nd firmware • tp-link archer c5 firmware (>= 2 150130 < 2 260429) • tp-link archer c7 firmware (>= 2 131217 < 2 241108) • tp-link archer c7 firmware 3 150508 • tp-link archer c1900 firmware (< 1 260428) • tp-link tl-wr902ac firmware 1 160905 • tp-link tl-wr902ac firmware 1 170628 • tp-link tl-wr940n firmware • tp-link tl-wr940n firmware (>= 5 161019 <= 5 220801) • tp-link tl-wr940n firmware (>= 6 170325 < 6 250925) • tp-link tl-wr940n plus firmware 6 170704 • tp-link tl-wr940n plus firmware 6 171115 • tp-link wr941hp firmware (< 1 211210) • tp-link tl-wr941nd firmware • tp-link tl-wr941nd firmware (>= 6 150206 < 6 220610) • tp-link wa901nd firmware • tp-link wa901nd firmware 5 160929 • tp-link wa901nd firmware (>= 6 191127 < 6 220701) • tp-link wa901nd firmware (>= 4 151029 < 4 201030)

Related

Weakness · CWE (1)

  • CWE-290 Authentication Bypass by Spoofing weakness

References