Live › vulnerability › CVE-2023-33538
Go to dashboardTP-Link TL-WR940N, TL-WR841N and TL-WR740N home routers have a command injection flaw in the /userRpm/WlanNetworkRpm web component. An attacker who can reach the router's web interface can run operating system commands on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| TP-Link Multiple Routers | vendor | – | – |
| tp-link tl-wr940n firmware | vendor | – | – |
| tp-link tl-wr841n firmware | vendor | – | – |
| tp-link tl-wr740n firmware | vendor | – | – |
Identify any TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10 or TL-WR740N V1/V2 in use, including on branch or remote sites.
Discontinue use of the affected models, since the sources say they are end-of-life and no fix is given; if replacement is not possible, follow CISA's instruction to apply vendor mitigations.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2023-33538")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.