Live › vulnerability › CVE-2023-50224
Go to dashboardTP-Link TL-WR841N home routers have an authentication bypass in the httpd web service on TCP port 80, caused by spoofing. An attacker on the network can get past the login and read stored credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| TP-Link TL-WR841N | vendor | – | – |
| tp-link tl-wr841n firmware | vendor | – | – |
| tp-link tl-wr841n firmware | vendor | >= 11_150616, < 11_211209 | 11_211209 |
| tp-link tl-wr841n firmware | vendor | >= 12_160624, < 12_230317 | 12_230317 |
| tp-link mr6400 firmware | vendor | – | – |
| tp-link tl-wdr3600 firmware |
| vendor |
| – |
| – |
| tp-link tl-wdr4300 firmware | vendor | – | – |
| tp-link wdr3500 firmware | vendor | – | – |
| tp-link tl-wr710n firmware | vendor | – | – |
| tp-link tl-wr740n firmware | vendor | – | – |
| tp-link tl-wr741nd firmware | vendor | – | – |
| tp-link tl-wr743nd firmware | vendor | – | – |
| tp-link wr749n firmware | vendor | – | – |
| tp-link mr3420 firmware | vendor | – | – |
| tp-link wr1043nd firmware | vendor | – | – |
| tp-link wr1045nd firmware | vendor | – | – |
| tp-link wr802n firmware | vendor | – | – |
| tp-link tl-wr810n firmware | vendor | – | – |
| tp-link tl-wr840n firmware | vendor | – | – |
| tp-link wr841hp firmware | vendor | – | – |
| tp-link tl-wr841nd firmware | vendor | – | – |
| tp-link wr842n firmware | vendor | – | – |
| tp-link wr842nd firmware | vendor | – | – |
| tp-link tl-wr843n firmware | vendor | – | – |
| tp-link wr845n firmware | vendor | – | – |
| tp-link wr945n firmware | vendor | – | – |
| tp-link tl-mr3020 firmware | vendor | – | – |
| tp-link tl-mr3220 firmware | vendor | – | – |
| tp-link wa701nd firmware | vendor | – | – |
| tp-link wa801nd firmware | vendor | – | – |
| tp-link archer c5 firmware | vendor | >= 2_150130, < 2_260429 | 2_260429 |
| tp-link archer c7 firmware | vendor | >= 2_131217, < 2_241108 | 2_241108 |
| tp-link archer c7 firmware | vendor | = 3_150508 | – |
| tp-link archer c1900 firmware | vendor | < 1_260428 | 1_260428 |
| tp-link tl-wr902ac firmware | vendor | = 1_160905 | – |
| tp-link tl-wr902ac firmware | vendor | = 1_170628 | – |
| tp-link tl-wr940n firmware | vendor | – | – |
| tp-link tl-wr940n firmware | vendor | >= 5_161019, <= 5_220801 | – |
| tp-link tl-wr940n firmware | vendor | >= 6_170325, < 6_250925 | 6_250925 |
| tp-link tl-wr940n plus firmware | vendor | = 6_170704 | – |
| tp-link tl-wr940n plus firmware | vendor | = 6_171115 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
This page as .md · .json · in your agent: get_signal("CVE-2023-50224")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.