peter bassill · operator
$ cve CVE-2023-50224 JSON

CVE-2023-50224 KEV

6.5
MEDIUM · CVSS 3.1 · EPSS 15.6% (pctl 97)

Patch first

On CISA KEV — known exploited in the wild, due 2025-09-24.

Description

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

Scoring

CVSS6.5 (MEDIUM, v3.1)
VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS15.56% — more likely to be exploited than 97% of all CVEs
WeaknessCWE-290
On CISA KEVyes — remediate by 2025-09-24
Public exploitnone known
Published2024-05-03
Last modified2026-09-03

CISA KEV

NameTP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
Added2025-09-03
Due2025-09-24
Vendor / productTP-Link / TL-WR841N
Ransomware usenone reported

Affected (40)

VendorProduct
tp-linkmr3420
tp-linkmr3420 firmware
tp-linkmr6400
tp-linkmr6400 firmware
tp-linktl-wdr3600
tp-linktl-wdr3600 firmware
tp-linktl-wdr4300
tp-linktl-wdr4300 firmware
tp-linktl-wr710n
tp-linktl-wr710n firmware
tp-linktl-wr740n
tp-linktl-wr740n firmware
tp-linktl-wr741nd
tp-linktl-wr741nd firmware
tp-linktl-wr743nd
tp-linktl-wr743nd firmware
tp-linktl-wr810n
tp-linktl-wr810n firmware
tp-linktl-wr840n
tp-linktl-wr840n firmware
tp-linktl-wr841n
tp-linktl-wr841n firmware
tp-linktl-wr841nd
tp-linktl-wr841nd firmware
tp-linkwdr3500
tp-linkwdr3500 firmware
tp-linkwr1043nd
tp-linkwr1043nd firmware
tp-linkwr1045nd
tp-linkwr1045nd firmware
tp-linkwr749n
tp-linkwr749n firmware
tp-linkwr802n
tp-linkwr802n firmware
tp-linkwr841hp
tp-linkwr841hp firmware
tp-linkwr842n
tp-linkwr842n firmware
tp-linkwr842nd
tp-linkwr842nd firmware

References

→ the Explorer  ·  watch your stack  ·  NVD