CVE-2023-50224

mediumpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.200 · 97 %ileEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV

Likely / severe?

20.0% (97th) EPSS

CVSS 6.5 · medium

Is it mine?

49 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

added 2025-09-03remediate by 2025-09-24

required action Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

EPSS · scored 2026-10-26

TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.06.5mediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU

v3.06.5mediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · zdi-disclosures@trendmicro.comexploitability 2.8 · impact 3.6

v3.16.5mediumAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · zdi-disclosures@trendmicro.comexploitability 2.8 · impact 3.6

v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: no · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-200USCWE-266USCWE-284USCWE-290US

affected products (49)

Products and version ranges known to be affected.

TP-Link TL-WR841N≤ 3.16.9 build 200409enisa_euvdEU
TP-Link Technologies Co Ltd. TL-WR841N≤ 12fstec_bduRU
tp-link archer c1900 firmware< 1_260428nvdUScpe:2.3:o:tp-link:archer_c1900_firmware:*:*:*:*:*:*:*:*
tp-link archer c5 firmware2_150130 → 2_260429nvdUScpe:2.3:o:tp-link:archer_c5_firmware:*:*:*:*:*:*:*:*
tp-link archer c7 firmware2_131217 → 2_241108nvdUScpe:2.3:o:tp-link:archer_c7_firmware:*:*:*:*:*:*:*:*
tp-link archer c7 firmware= 3_150508nvdUScpe:2.3:o:tp-link:archer_c7_firmware:*:*:*:*:*:*:*:*
tp-link mr3420 firmwareall versionsnvdUScpe:2.3:o:tp-link:mr3420_firmware:*:*:*:*:*:*:*:*
tp-link mr6400 firmwareall versionsnvdUScpe:2.3:o:tp-link:mr6400_firmware:*:*:*:*:*:*:*:*
tp-link tl-mr3020 firmwareall versionsnvdUScpe:2.3:o:tp-link:tl-mr3020_firmware:*:*:*:*:*:*:*:*
tp-link tl-mr3220 firmwareall versionsnvdUScpe:2.3:o:tp-link:tl-mr3220_firmware:*:*:*:*:*:*:*:*
tp-link tl-wdr3600 firmwareall versionsnvdUScpe:2.3:o:tp-link:tl-wdr3600_firmware:*:*:*:*:*:*:*:*
tp-link tl-wdr4300 firmwareall versionsnvdUScpe:2.3:o:tp-link:tl-wdr4300_firmware:*:*:*:*:*:*:*:*
tp-link tl-wr710n firmwareall versionsnvdUScpe:2.3:o:tp-link:tl-wr710n_firmware:*:*:*:*:*:*:*:*
tp-link tl-wr740n firmwareall versionsnvdUScpe:2.3:o:tp-link:tl-wr740n_firmware:*:*:*:*:*:*:*:*
tp-link tl-wr741nd firmwareall versionsnvdUScpe:2.3:o:tp-link:tl-wr741nd_firmware:*:*:*:*:*:*:*:*
tp-link tl-wr743nd firmwareall versionsnvdUScpe:2.3:o:tp-link:tl-wr743nd_firmware:*:*:*:*:*:*:*:*
tp-link tl-wr810n firmwareall versionsnvdUScpe:2.3:o:tp-link:tl-wr810n_firmware:*:*:*:*:*:*:*:*
tp-link tl-wr840n firmwareall versionsnvdUScpe:2.3:o:tp-link:tl-wr840n_firmware:*:*:*:*:*:*:*:*
tp-link tl-wr841n firmwareall versionsnvdUScpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*
tp-link tl-wr841n firmware11_150616 → 11_211209nvdUScpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*

showing 20 of 49

also known as (6)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2024-05-03modified 2026-09-03

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan