TP-Link WR841N Router multiple vulnerabilities
Advisory ansehen veröffentlicht 2026-04-29
Multiple TP-Link products (TP-Link Archer C20 V5, Archer C20 6.0, Archer AX53 v1.0 and TL-WR841N v13) are affected by multiple vulnerabilities. The most severe of these vulnerabilities could allow an adjacent, unauthenticated attacker to execute administrative commands.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-5039US | high8.8 | — | ||
TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from default web management credentials, making the key predictable if d… | ||||
| CVE-2026-0834US | high8.8 | Exploit | ||
Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands inc… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (5)
- BehobenArcher AX53 v1.0
Fixed in V1_251215.
https://www.tp-link.com/us/support/faq/4905/ - BehobenArcher C20 V5
Fixed in EU_V5_260317.
https://www.tp-link.com/us/support/faq/4905/ - BehobenArcher C20 v6.0
Fixed in V6_251031.
https://www.tp-link.com/us/support/faq/4905/ - BehobenTL-WR841N v13
Fixed in 0.9.1 Build 20231120 Rel.62366.
https://www.tp-link.com/us/support/faq/4905/ - BehobenTL-WR841N v13
Fixed in 0.9.1 Build 20231120 Rel.62366.
https://www.tp-link.com/us/support/faq/4905/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan