CVE-2023-50224 - Vulnerability Details

- TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability

Description

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

Published: 2024-05-03

Score: 6.5 Medium

EPSS: 15.6% Moderate

KEV: Yes

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

TP-Link

TL-WR841N

affected

Version	Status	Constraints
`3.16.9 build 200409`	affected	—
`V8`	affected	—
`V9`	affected	—
`V10`	affected	—
`V11`	affected	—
`V11_211209`	unaffected	—
`V12`	affected	—
`V12_230317`	unaffected	—

TP-Link

TL-WR841ND

affected

Version	Status	Constraints
`V8`	affected	—
`V9`	affected	—
`V10`	affected	—
`V11`	affected	—
`V11_211209`	unaffected	—
`V12`	affected	—
`V12_230317`	unaffected	—

TP-Link

TL-MR6400

affected

Version	Status	Constraints
`V1`	affected	—
`V2`	affected	—

TP-Link

Archer C5

affected

Version	Status	Constraints
`V2`	affected	—

TP-Link

Archer C7

affected

Version	Status	Constraints
`V2`	affected	—
`V2_241108`	unaffected	—
`V3`	affected	—

TP-Link

TL-WDR3600

affected

Version	Status	Constraints
`V2`	affected	—

TP-Link

TL-WDR4300

affected

Version	Status	Constraints
`V1`	affected	—

TP-Link

TL-WDR3500

affected

Version	Status	Constraints
`V2`	affected	—

TP-Link

TL-WR740N

affected

Version	Status	Constraints
`V4`	affected	—
`V5`	affected	—
`V6`	affected	—
`V7`	affected	—

TP-Link

TL-WR741ND

affected

Version	Status	Constraints
`V4`	affected	—
`V5`	affected	—
`V6`	affected	—

TP-Link

TL-WR749N

affected

Version	Status	Constraints
`BR 6.0`	affected	—
`BR 7.0`	affected	—

TP-Link

TL-MR3420

affected

Version	Status	Constraints
`V2`	affected	—
`V3`	affected	—
`V4`	affected	—

TP-Link

TL-WR1043ND

affected

Version	Status	Constraints
`V2`	affected	—
`V3`	affected	—
`V4`	affected	—

TP-Link

TL-WR1045ND

affected

Version	Status	Constraints
`RU V2`	affected	—

TP-Link

TL-WR840N

affected

Version	Status	Constraints
`V2`	affected	—
`V3`	affected	—

TP-Link

TL-WR842N

affected

Version	Status	Constraints
`V2`	affected	—
`V3`	affected	—
`V4`	affected	—

TP-Link

TL-WR842ND

affected

Version	Status	Constraints
`V2`	affected	—
`V3`	affected	—
`V4`	affected	—

TP-Link

TL-WR845N

affected

Version	Status	Constraints
`V1`	affected	—
`V2`	affected	—

TP-Link

TL-WR941ND

affected

Version	Status	Constraints
`V5`	affected	—
`V6`	affected	—
`V6_220610`	unaffected	—

TP-Link

TL-WR945N

affected

Version	Status	Constraints
`V1`	affected	—

TP-Link

TL-WA801ND

affected

Version	Status	Constraints
`V3`	affected	—
`V4`	affected	—

TP-Link

TL-WA901ND

affected

Version	Status	Constraints
`V3`	affected	—
`V4`	affected	—
`V4_201030`	unaffected	—
`V5`	affected	—
`V5_201030`	unaffected	—

Configuration 1 [-]

AND

cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr841n:8.0:::::::*
	cpe:2.3:h:tp-link:tl-wr841n:9:::::::*
	cpe:2.3:h:tp-link:tl-wr841n:10:::::::*

Configuration 2 [-]

AND

cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr841n:11:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr841n:12:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:tp-link:mr6400_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:mr6400:1.0:::::::*
	cpe:2.3:h:tp-link:mr6400:2.0:::::::*

Configuration 5 [-]

AND

cpe:2.3:o:tp-link:tl-wdr3600_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wdr3600:2.0:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:tp-link:tl-wdr4300_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wdr4300:1:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:tp-link:wdr3500_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wdr3500:2.0:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:tp-link:tl-wr710n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr710n:1.0:::::::*
	cpe:2.3:h:tp-link:tl-wr710n:2.0:::::::*

Configuration 9 [-]

AND

cpe:2.3:o:tp-link:tl-wr740n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr740n:4.0:::::::*
	cpe:2.3:h:tp-link:tl-wr740n:5.0:::::::*
	cpe:2.3:h:tp-link:tl-wr740n:6.0:::::::*
	cpe:2.3:h:tp-link:tl-wr740n:7.0:::::::*

Configuration 10 [-]

AND

cpe:2.3:o:tp-link:tl-wr741nd_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr741nd:2.0:::::::*
	cpe:2.3:h:tp-link:tl-wr741nd:4.0:::::::*
	cpe:2.3:h:tp-link:tl-wr741nd:5:::::::*
	cpe:2.3:h:tp-link:tl-wr741nd:6.0:::::::*

Configuration 11 [-]

AND

cpe:2.3:o:tp-link:tl-wr743nd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr743nd:2.0:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:tp-link:wr749n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wr749n:6.0:::::::*
	cpe:2.3:h:tp-link:wr749n:7.0:::::::*

Configuration 13 [-]

AND

cpe:2.3:o:tp-link:mr3420_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:mr3420:2.0:::::::*
	cpe:2.3:h:tp-link:mr3420:3.0:::::::*
	cpe:2.3:h:tp-link:mr3420:4.0:::::::*

Configuration 14 [-]

AND

cpe:2.3:o:tp-link:wr1043nd_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wr1043nd:2.0:::::::*
	cpe:2.3:h:tp-link:wr1043nd:3.0:::::::*
	cpe:2.3:h:tp-link:wr1043nd:4.0:::::::*

Configuration 15 [-]

AND

cpe:2.3:o:tp-link:wr1045nd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wr1045nd:2.0:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:tp-link:wr802n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wr802n:1.0:::::::*
	cpe:2.3:h:tp-link:wr802n:2.0:::::::*
	cpe:2.3:h:tp-link:wr802n:3.0:::::::*

Configuration 17 [-]

AND

cpe:2.3:o:tp-link:tl-wr810n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr810n:1.0:::::::*
	cpe:2.3:h:tp-link:tl-wr810n:2.0:::::::*

Configuration 18 [-]

AND

cpe:2.3:o:tp-link:tl-wr840n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr840n:2.0:::::::*
	cpe:2.3:h:tp-link:tl-wr840n:3.0:::::::*

Configuration 19 [-]

AND

cpe:2.3:o:tp-link:wr841hp_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wr841hp:2.0:::::::*
	cpe:2.3:h:tp-link:wr841hp:3.0:::::::*

Configuration 20 [-]

AND

cpe:2.3:o:tp-link:tl-wr841nd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr841nd:11.0:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:tp-link:wr842n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wr842n:2.0:::::::*
	cpe:2.3:h:tp-link:wr842n:3.0:::::::*
	cpe:2.3:h:tp-link:wr842n:4.0:::::::*

Configuration 22 [-]

AND

cpe:2.3:o:tp-link:wr842nd_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wr842nd:2.0:::::::*
	cpe:2.3:h:tp-link:wr842nd:3.0:::::::*
	cpe:2.3:h:tp-link:wr842nd:4.0:::::::*

Configuration 23 [-]

AND

cpe:2.3:o:tp-link:tl-wr843n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr843n:2.0:::::::*
	cpe:2.3:h:tp-link:tl-wr843n:3.0:::::::*

Configuration 24 [-]

AND

cpe:2.3:o:tp-link:wr845n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wr845n:1.0:::::::*
	cpe:2.3:h:tp-link:wr845n:2.0:::::::*

Configuration 25 [-]

AND

cpe:2.3:o:tp-link:wr945n_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wr945n:1.0:*:*:*:*:*:*:*

Configuration 26 [-]

AND

cpe:2.3:o:tp-link:tl-mr3020_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-mr3020:1.0:*:*:*:*:*:*:*

Configuration 27 [-]

AND

cpe:2.3:o:tp-link:tl-mr3220_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-mr3220:2.0:*:*:*:*:*:*:*

Configuration 28 [-]

AND

cpe:2.3:o:tp-link:mr3420_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:mr3420:2.0:::::::*
	cpe:2.3:h:tp-link:mr3420:3.0:::::::*

Configuration 29 [-]

AND

cpe:2.3:o:tp-link:wa701nd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wa701nd:2.0:*:*:*:*:*:*:*

Configuration 30 [-]

AND

cpe:2.3:o:tp-link:wa801nd_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wa801nd:3.0:::::::*
	cpe:2.3:h:tp-link:wa801nd:4.0:::::::*

Configuration 31 [-]

AND

cpe:2.3:o:tp-link:archer_c5_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_c5:2.0:*:*:*:*:*:*:*

Configuration 32 [-]

AND

cpe:2.3:o:tp-link:archer_c7_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_c7:2.0:*:*:*:*:*:*:*

Configuration 33 [-]

AND

cpe:2.3:o:tp-link:archer_c7_firmware:3_150508:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_c7:3.0:*:*:*:*:*:*:*

Configuration 34 [-]

AND

cpe:2.3:o:tp-link:archer_c1900_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_c1900:1.0:*:*:*:*:*:*:*

Configuration 35 [-]

AND

OR	cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_160905:::::::*
	cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_170628:::::::*

cpe:2.3:h:tp-link:tl-wr902ac:1:*:*:*:*:*:*:*

Configuration 36 [-]

AND

cpe:2.3:o:tp-link:tl-wr940n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr940n:2.0:::::::*
	cpe:2.3:h:tp-link:tl-wr940n:4.0:::::::*
	cpe:2.3:h:tp-link:tl-wr940n:v3:::::::*

Configuration 37 [-]

AND

cpe:2.3:o:tp-link:tl-wr940n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr940n:5.0:*:*:*:*:*:*:*

Configuration 38 [-]

AND

cpe:2.3:o:tp-link:tl-wr940n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr940n:v6:*:*:*:*:*:*:*

Configuration 39 [-]

AND

OR	cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_170704:::::::*
	cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_171115:::::::*

cpe:2.3:h:tp-link:tl-wr940n_plus:6.0:*:*:*:*:*:*:*

Configuration 40 [-]

AND

cpe:2.3:o:tp-link:wr941hp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wr941hp:1.0:*:*:*:*:*:*:*

Configuration 41 [-]

AND

cpe:2.3:o:tp-link:tl-wr941nd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr941nd:v5:*:*:*:*:*:*:*

Configuration 42 [-]

AND

cpe:2.3:o:tp-link:tl-wr941nd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr941nd:v6:*:*:*:*:*:*:*

Configuration 43 [-]

AND

cpe:2.3:o:tp-link:wa901nd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wa901nd:3.0:*:*:*:*:*:*:*

Configuration 44 [-]

AND

cpe:2.3:o:tp-link:wa901nd_firmware:5_160929:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wa901nd:5.0:*:*:*:*:*:*:*

Configuration 45 [-]

AND

cpe:2.3:o:tp-link:wa901nd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wa901nd:6.0:*:*:*:*:*:*:*

Configuration 46 [-]

AND

cpe:2.3:o:tp-link:wa901nd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wa901nd:4.0:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2023-55046	TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. . Was ZDI-CAN-19899.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is in the KEV database since Sept. 3, 2025.

The EPSS score is 0.15558.

Exploitation active

Automatable no

Technical Impact partial

References

Link	Providers
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224
https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware
https://www.tp-link.com/us/support/faq/5058/
https://www.zerodayinitiative.com/advisories/ZDI-23-1808/

History

Thu, 03 Sep 2026 17:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Tp-link archer C1900 Tp-link archer C1900 Firmware Tp-link archer C5 Tp-link archer C5 Firmware Tp-link archer C7 Tp-link archer C7 Firmware Tp-link mr3420 Tp-link mr3420 Firmware Tp-link mr6400 Tp-link mr6400 Firmware Tp-link tl-mr3020 Tp-link tl-mr3020 Firmware Tp-link tl-mr3220 Tp-link tl-mr3220 Firmware Tp-link tl-wdr3600 Tp-link tl-wdr3600 Firmware Tp-link tl-wdr4300 Tp-link tl-wdr4300 Firmware Tp-link tl-wr710n Tp-link tl-wr710n Firmware Tp-link tl-wr740n Tp-link tl-wr740n Firmware Tp-link tl-wr741nd Tp-link tl-wr741nd Firmware Tp-link tl-wr743nd Tp-link tl-wr743nd Firmware Tp-link tl-wr810n Tp-link tl-wr810n Firmware Tp-link tl-wr840n Tp-link tl-wr840n Firmware Tp-link tl-wr841nd Tp-link tl-wr841nd Firmware Tp-link tl-wr843n Tp-link tl-wr843n Firmware Tp-link tl-wr902ac Tp-link tl-wr902ac Firmware Tp-link tl-wr940n Tp-link tl-wr940n Firmware Tp-link tl-wr940n Plus Tp-link tl-wr940n Plus Firmware Tp-link tl-wr941nd Tp-link tl-wr941nd Firmware Tp-link wa701nd Tp-link wa701nd Firmware Tp-link wa801nd Tp-link wa801nd Firmware Tp-link wa901nd Tp-link wa901nd Firmware Tp-link wdr3500 Tp-link wdr3500 Firmware Tp-link wr1043nd Tp-link wr1043nd Firmware Tp-link wr1045nd Tp-link wr1045nd Firmware Tp-link wr749n Tp-link wr749n Firmware Tp-link wr802n Tp-link wr802n Firmware Tp-link wr841hp Tp-link wr841hp Firmware Tp-link wr842n Tp-link wr842n Firmware Tp-link wr842nd Tp-link wr842nd Firmware Tp-link wr845n Tp-link wr845n Firmware Tp-link wr941hp Tp-link wr941hp Firmware Tp-link wr945n Tp-link wr945n Firmware
CPEs	cpe:2.3:o:tp-link:tl-wr841n_firmware:3.16.9:build_200409::::::	cpe:2.3:h:tp-link:archer_c1900:1.0:::::::* cpe:2.3:h:tp-link:archer_c5:2.0:::::::* cpe:2.3:h:tp-link:archer_c7:2.0:::::::* cpe:2.3:h:tp-link:archer_c7:3.0:::::::* cpe:2.3:h:tp-link:mr3420:2.0:::::::* cpe:2.3:h:tp-link:mr3420:3.0:::::::* cpe:2.3:h:tp-link:mr3420:4.0:::::::* cpe:2.3:h:tp-link:mr6400:1.0:::::::* cpe:2.3:h:tp-link:mr6400:2.0:::::::* cpe:2.3:h:tp-link:tl-mr3020:1.0:::::::* cpe:2.3:h:tp-link:tl-mr3220:2.0:::::::* cpe:2.3:h:tp-link:tl-wdr3600:2.0:::::::* cpe:2.3:h:tp-link:tl-wdr4300:1:::::::* cpe:2.3:h:tp-link:tl-wr710n:1.0:::::::* cpe:2.3:h:tp-link:tl-wr710n:2.0:::::::* cpe:2.3:h:tp-link:tl-wr740n:4.0:::::::* cpe:2.3:h:tp-link:tl-wr740n:5.0:::::::* cpe:2.3:h:tp-link:tl-wr740n:6.0:::::::* cpe:2.3:h:tp-link:tl-wr740n:7.0:::::::* cpe:2.3:h:tp-link:tl-wr741nd:2.0:::::::* cpe:2.3:h:tp-link:tl-wr741nd:4.0:::::::* cpe:2.3:h:tp-link:tl-wr741nd:5:::::::* cpe:2.3:h:tp-link:tl-wr741nd:6.0:::::::* cpe:2.3:h:tp-link:tl-wr743nd:2.0:::::::* cpe:2.3:h:tp-link:tl-wr810n:1.0:::::::* cpe:2.3:h:tp-link:tl-wr810n:2.0:::::::* cpe:2.3:h:tp-link:tl-wr840n:2.0:::::::* cpe:2.3:h:tp-link:tl-wr840n:3.0:::::::* cpe:2.3:h:tp-link:tl-wr841n:10:::::::* cpe:2.3:h:tp-link:tl-wr841n:11:::::::* cpe:2.3:h:tp-link:tl-wr841n:8.0:::::::* cpe:2.3:h:tp-link:tl-wr841n:9:::::::* cpe:2.3:h:tp-link:tl-wr841nd:11.0:::::::* cpe:2.3:h:tp-link:tl-wr843n:2.0:::::::* cpe:2.3:h:tp-link:tl-wr843n:3.0:::::::* cpe:2.3:h:tp-link:tl-wr902ac:1:::::::* cpe:2.3:h:tp-link:tl-wr940n:2.0:::::::* cpe:2.3:h:tp-link:tl-wr940n:4.0:::::::* cpe:2.3:h:tp-link:tl-wr940n:5.0:::::::* cpe:2.3:h:tp-link:tl-wr940n:v3:::::::* cpe:2.3:h:tp-link:tl-wr940n:v6:::::::* cpe:2.3:h:tp-link:tl-wr940n_plus:6.0:::::::* cpe:2.3:h:tp-link:tl-wr941nd:v5:::::::* cpe:2.3:h:tp-link:tl-wr941nd:v6:::::::* cpe:2.3:h:tp-link:wa701nd:2.0:::::::* cpe:2.3:h:tp-link:wa801nd:3.0:::::::* cpe:2.3:h:tp-link:wa801nd:4.0:::::::* cpe:2.3:h:tp-link:wa901nd:3.0:::::::* cpe:2.3:h:tp-link:wa901nd:4.0:::::::* cpe:2.3:h:tp-link:wa901nd:5.0:::::::* cpe:2.3:h:tp-link:wa901nd:6.0:::::::* cpe:2.3:h:tp-link:wdr3500:2.0:::::::* cpe:2.3:h:tp-link:wr1043nd:2.0:::::::* cpe:2.3:h:tp-link:wr1043nd:3.0:::::::* cpe:2.3:h:tp-link:wr1043nd:4.0:::::::* cpe:2.3:h:tp-link:wr1045nd:2.0:::::::* cpe:2.3:h:tp-link:wr749n:6.0:::::::* cpe:2.3:h:tp-link:wr749n:7.0:::::::* cpe:2.3:h:tp-link:wr802n:1.0:::::::* cpe:2.3:h:tp-link:wr802n:2.0:::::::* cpe:2.3:h:tp-link:wr802n:3.0:::::::* cpe:2.3:h:tp-link:wr841hp:2.0:::::::* cpe:2.3:h:tp-link:wr841hp:3.0:::::::* cpe:2.3:h:tp-link:wr842n:2.0:::::::* cpe:2.3:h:tp-link:wr842n:3.0:::::::* cpe:2.3:h:tp-link:wr842n:4.0:::::::* cpe:2.3:h:tp-link:wr842nd:2.0:::::::* cpe:2.3:h:tp-link:wr842nd:3.0:::::::* cpe:2.3:h:tp-link:wr842nd:4.0:::::::* cpe:2.3:h:tp-link:wr845n:1.0:::::::* cpe:2.3:h:tp-link:wr845n:2.0:::::::* cpe:2.3:h:tp-link:wr941hp:1.0:::::::* cpe:2.3:h:tp-link:wr945n:1.0:::::::* cpe:2.3:o:tp-link:archer_c1900_firmware:::::::: cpe:2.3:o:tp-link:archer_c5_firmware:::::::: cpe:2.3:o:tp-link:archer_c7_firmware:::::::: cpe:2.3:o:tp-link:archer_c7_firmware:3_150508:::::::* cpe:2.3:o:tp-link:mr3420_firmware:-:::::::* cpe:2.3:o:tp-link:mr6400_firmware:-:::::::* cpe:2.3:o:tp-link:tl-mr3020_firmware:-:::::::* cpe:2.3:o:tp-link:tl-mr3220_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wdr3600_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wdr4300_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr710n_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr740n_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr741nd_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr743nd_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr810n_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr840n_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr841n_firmware:::::::: cpe:2.3:o:tp-link:tl-wr841nd_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr843n_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_160905:::::::* cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_170628:::::::* cpe:2.3:o:tp-link:tl-wr940n_firmware:::::::: cpe:2.3:o:tp-link:tl-wr940n_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_170704:::::::* cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_171115:::::::* cpe:2.3:o:tp-link:tl-wr941nd_firmware:::::::: cpe:2.3:o:tp-link:tl-wr941nd_firmware:-:::::::* cpe:2.3:o:tp-link:wa701nd_firmware:-:::::::* cpe:2.3:o:tp-link:wa801nd_firmware:-:::::::* cpe:2.3:o:tp-link:wa901nd_firmware:::::::: cpe:2.3:o:tp-link:wa901nd_firmware:-:::::::* cpe:2.3:o:tp-link:wa901nd_firmware:5_160929:::::::* cpe:2.3:o:tp-link:wdr3500_firmware:-:::::::* cpe:2.3:o:tp-link:wr1043nd_firmware:-:::::::* cpe:2.3:o:tp-link:wr1045nd_firmware:-:::::::* cpe:2.3:o:tp-link:wr749n_firmware:-:::::::* cpe:2.3:o:tp-link:wr802n_firmware:-:::::::* cpe:2.3:o:tp-link:wr841hp_firmware:-:::::::* cpe:2.3:o:tp-link:wr842n_firmware:-:::::::* cpe:2.3:o:tp-link:wr842nd_firmware:-:::::::* cpe:2.3:o:tp-link:wr845n_firmware:-:::::::* cpe:2.3:o:tp-link:wr941hp_firmware:::::::: cpe:2.3:o:tp-link:wr945n_firmware:-:::::::*
Vendors & Products		Tp-link archer C1900 Tp-link archer C1900 Firmware Tp-link archer C5 Tp-link archer C5 Firmware Tp-link archer C7 Tp-link archer C7 Firmware Tp-link mr3420 Tp-link mr3420 Firmware Tp-link mr6400 Tp-link mr6400 Firmware Tp-link tl-mr3020 Tp-link tl-mr3020 Firmware Tp-link tl-mr3220 Tp-link tl-mr3220 Firmware Tp-link tl-wdr3600 Tp-link tl-wdr3600 Firmware Tp-link tl-wdr4300 Tp-link tl-wdr4300 Firmware Tp-link tl-wr710n Tp-link tl-wr710n Firmware Tp-link tl-wr740n Tp-link tl-wr740n Firmware Tp-link tl-wr741nd Tp-link tl-wr741nd Firmware Tp-link tl-wr743nd Tp-link tl-wr743nd Firmware Tp-link tl-wr810n Tp-link tl-wr810n Firmware Tp-link tl-wr840n Tp-link tl-wr840n Firmware Tp-link tl-wr841nd Tp-link tl-wr841nd Firmware Tp-link tl-wr843n Tp-link tl-wr843n Firmware Tp-link tl-wr902ac Tp-link tl-wr902ac Firmware Tp-link tl-wr940n Tp-link tl-wr940n Firmware Tp-link tl-wr940n Plus Tp-link tl-wr940n Plus Firmware Tp-link tl-wr941nd Tp-link tl-wr941nd Firmware Tp-link wa701nd Tp-link wa701nd Firmware Tp-link wa801nd Tp-link wa801nd Firmware Tp-link wa901nd Tp-link wa901nd Firmware Tp-link wdr3500 Tp-link wdr3500 Firmware Tp-link wr1043nd Tp-link wr1043nd Firmware Tp-link wr1045nd Tp-link wr1045nd Firmware Tp-link wr749n Tp-link wr749n Firmware Tp-link wr802n Tp-link wr802n Firmware Tp-link wr841hp Tp-link wr841hp Firmware Tp-link wr842n Tp-link wr842n Firmware Tp-link wr842nd Tp-link wr842nd Firmware Tp-link wr845n Tp-link wr845n Firmware Tp-link wr941hp Tp-link wr941hp Firmware Tp-link wr945n Tp-link wr945n Firmware

Wed, 02 Sep 2026 18:30:00 +0000

Type	Values Removed	Values Added
Metrics	cvssV3_0 `{'score': 6.5, 'vector': 'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}`

Wed, 02 Sep 2026 18:00:00 +0000

Type	Values Removed	Values Added
Description	TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. . Was ZDI-CAN-19899.	TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
References		https://www.tp-link.com/us/support/faq/5058/
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}`

Wed, 22 Oct 2025 00:15:00 +0000

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 21 Oct 2025 23:30:00 +0000

Type	Values Removed	Values Added
References		https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224

Tue, 21 Oct 2025 20:30:00 +0000

Type	Values Removed	Values Added
References	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224

Tue, 21 Oct 2025 19:30:00 +0000

Type	Values Removed	Values Added
References		https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224

Wed, 03 Sep 2025 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		kev `{'dateAdded': '2025-09-03T00:00:00+00:00', 'dueDate': '2025-09-24T00:00:00+00:00'}`

Thu, 07 Aug 2025 16:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Tp-link tl-wr841n
CPEs		cpe:2.3:h:tp-link:tl-wr841n:12:::::::* cpe:2.3:o:tp-link:tl-wr841n_firmware:3.16.9:build_200409::::::
Vendors & Products		Tp-link tl-wr841n

Thu, 19 Sep 2024 08:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Tp-link Tp-link tl-wr841n Firmware
CPEs		cpe:2.3:o:tp-link:tl-wr841n_firmware:-:::::::*
Vendors & Products		Tp-link Tp-link tl-wr841n Firmware
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 18 Sep 2024 18:45:00 +0000

Type	Values Removed	Values Added
Description	TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.	TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. . Was ZDI-CAN-19899.

Subscriptions

Tp-link Archer C1900 Archer C1900 Firmware Archer C5 Archer C5 Firmware Archer C7 Archer C7 Firmware Mr3420 Mr3420 Firmware Mr6400 Mr6400 Firmware Tl-mr3020 Tl-mr3020 Firmware Tl-mr3220 Tl-mr3220 Firmware Tl-wdr3600 Tl-wdr3600 Firmware Tl-wdr4300 Tl-wdr4300 Firmware Tl-wr710n Tl-wr710n Firmware Tl-wr740n Tl-wr740n Firmware Tl-wr741nd Tl-wr741nd Firmware Tl-wr743nd Tl-wr743nd Firmware Tl-wr810n Tl-wr810n Firmware Tl-wr840n Tl-wr840n Firmware Tl-wr841n Tl-wr841n Firmware Tl-wr841nd Tl-wr841nd Firmware Tl-wr843n Tl-wr843n Firmware Tl-wr902ac Tl-wr902ac Firmware Tl-wr940n Tl-wr940n Firmware Tl-wr940n Plus Tl-wr940n Plus Firmware Tl-wr941nd Tl-wr941nd Firmware Wa701nd Wa701nd Firmware Wa801nd Wa801nd Firmware Wa901nd Wa901nd Firmware Wdr3500 Wdr3500 Firmware Wr1043nd Wr1043nd Firmware Wr1045nd Wr1045nd Firmware Wr749n Wr749n Firmware Wr802n Wr802n Firmware Wr841hp Wr841hp Firmware Wr842n Wr842n Firmware Wr842nd Wr842nd Firmware Wr845n Wr845n Firmware Wr941hp Wr941hp Firmware Wr945n Wr945n Firmware

MITRE

Status: PUBLISHED

Assigner: zdi

Published: 2024-05-03T02:14:42.922Z

Updated: 2026-09-02T17:58:31.299Z

Reserved: 2023-12-05T16:15:17.543Z

Link: CVE-2023-50224

Vulnrichment

Updated: 2024-08-02T22:09:49.801Z

NVD

Status : Analyzed

Published: 2024-05-03T03:16:10.833

Modified: 2026-09-03T17:28:42.113

Link: CVE-2023-50224

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-290

Tracking

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation active

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object