Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

CVE-2023-50224

medium CISA KEV

TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

Vendor / product: TP-Link — TL-WR841N

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

CVSS
6.5
6.5 (CVSS v3.1)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity source: NVD CVSS v3.1 (zdi-disclosures@trendmicro.com)
Timeline (UTC)
Published: 2024-05-03 03:16
Modified: 2026-09-03 17:28
NVD status: Analyzed
Last synced 1 day ago
Verified against the source API 2026-10-27 07:07 UTC
Exploitation
Listed in CISA KEV
Added 2025-09-03 · due 2025-09-24
Known ransomware use: Unknown

Required action (CISA)

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Affected products

tp-link / tl-wr841n_firmware all versions, ≥11_150616 <11_211209, ≥12_160624 <12_230317
tp-link / mr6400_firmware all versions
tp-link / tl-wdr3600_firmware all versions
tp-link / tl-wdr4300_firmware all versions
tp-link / wdr3500_firmware all versions
tp-link / tl-wr710n_firmware all versions
tp-link / tl-wr740n_firmware all versions
tp-link / tl-wr741nd_firmware all versions
tp-link / tl-wr743nd_firmware all versions
tp-link / wr749n_firmware all versions
tp-link / mr3420_firmware all versions
tp-link / wr1043nd_firmware all versions
tp-link / wr1045nd_firmware all versions
tp-link / wr802n_firmware all versions
tp-link / tl-wr810n_firmware all versions
tp-link / tl-wr840n_firmware all versions
tp-link / wr841hp_firmware all versions
tp-link / tl-wr841nd_firmware all versions
tp-link / wr842n_firmware all versions
tp-link / wr842nd_firmware all versions
tp-link / tl-wr843n_firmware all versions
tp-link / wr845n_firmware all versions
tp-link / wr945n_firmware all versions
tp-link / tl-mr3020_firmware all versions
tp-link / tl-mr3220_firmware all versions
tp-link / wa701nd_firmware all versions
tp-link / wa801nd_firmware all versions
tp-link / archer_c5_firmware ≥2_150130 <2_260429
tp-link / archer_c7_firmware ≥2_131217 <2_241108, 3_150508
tp-link / archer_c1900_firmware <1_260428
tp-link / tl-wr902ac_firmware 1_160905, 1_170628
tp-link / tl-wr940n_firmware all versions, ≥5_161019 ≤5_220801, ≥6_170325 <6_250925
tp-link / tl-wr940n_plus_firmware 6_170704, 6_171115
tp-link / wr941hp_firmware <1_211210
tp-link / tl-wr941nd_firmware all versions, ≥6_150206 <6_220610
tp-link / wa901nd_firmware all versions, 5_160929, ≥6_191127 <6_220701, ≥4_151029 <4_201030

Weakness classification (CWE)

CWE-290

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Vendor advisory: https://www.tp-link.com/us/support/faq/5058/

References

Data sources

CISA KEV — fetched 2026-10-27 06:50 UTC · record ↗
NVD CVE API 2.0 — fetched 2026-10-27 07:07 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

Related CVEs

CVE-2026-0631CVE-2026-19586CVE-2025-7851CVE-2025-6542CVE-2025-9377