Search
Find a vulnerability
Search criteria
4 vulnerabilities found for tl-wr743nd_firmware by tp-link
CVE-2023-50224 (GCVE-0-2023-50224)
Vulnerability from nvd – Published: 2024-05-03 02:14 – Updated: 2026-09-02 17:58Title
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
Summary
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
Severity
6.5 (Medium)
SSVC
Exploitation: active
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-09-03 03:55 UTC
CWE
- CWE-290 - Authentication Bypass by Spoofing
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-… | x_research-advisory |
| https://www.tp-link.com/en/support/download/tl-wr… | vendor-advisory |
| https://www.tp-link.com/us/support/faq/5058/ | vendor-advisory |
| https://www.cisa.gov/known-exploited-vulnerabilit… | government-resource |
Impacted products
23 products
| Vendor | Product | Version | |
|---|---|---|---|
| TP-Link | TL-WR841N |
Affected:
3.16.9 build 200409
(custom)
Affected: V8 (custom) Affected: V9 (custom) Affected: V10 (custom) Affected: V11 (custom) Unaffected: V11_211209 (custom) Affected: V12 (custom) Unaffected: V12_230317 (custom) |
|
| TP-Link | TL-WR841ND |
Affected:
V8
(custom)
Affected: V9 (custom) Affected: V10 (custom) Affected: V11 (custom) Unaffected: V11_211209 (custom) Affected: V12 (custom) Unaffected: V12_230317 (custom) |
|
| TP-Link | TL-MR6400 |
Affected:
V1
(custom)
Affected: V2 (custom) |
|
| TP-Link | Archer C5 |
Affected:
V2
(custom)
|
|
| TP-Link | Archer C7 |
Affected:
V2
(custom)
Unaffected: V2_241108 (custom) Affected: V3 (custom) |
|
| TP-Link | TL-WDR3600 |
Affected:
V2
(custom)
|
|
| TP-Link | TL-WDR4300 |
Affected:
V1
(custom)
|
|
| TP-Link | TL-WDR3500 |
Affected:
V2
(custom)
|
|
| TP-Link | TL-WR740N |
Affected:
V4
(custom)
Affected: V5 (custom) Affected: V6 (custom) Affected: V7 (custom) |
|
| TP-Link | TL-WR741ND |
Affected:
V4
(custom)
Affected: V5 (custom) Affected: V6 (custom) |
|
| TP-Link | TL-WR749N |
Affected:
BR 6.0
(custom)
Affected: BR 7.0 (custom) |
|
| TP-Link | TL-MR3420 |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR1043ND |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR1045ND |
Affected:
RU V2
(custom)
|
|
| TP-Link | TL-WR840N |
Affected:
V2
(custom)
Affected: V3 (custom) |
|
| TP-Link | TL-WR842N |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR842ND |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR845N |
Affected:
V1
(custom)
Affected: V2 (custom) |
|
| TP-Link | TL-WR941ND |
Affected:
V5
(custom)
Affected: V6 (custom) Unaffected: V6_220610 (custom) |
|
| TP-Link | TL-WR945N |
Affected:
V1
(custom)
|
|
| TP-Link | TL-WA801ND |
Affected:
V3
(custom)
Affected: V4 (custom) |
|
| TP-Link | TL-WA901ND |
Affected:
V3
(custom)
Affected: V4 (custom) Unaffected: V4_201030 (custom) Affected: V5 (custom) Unaffected: V5_201030 (custom) |
|
| tp-link | tl-wr841n_firmware |
Affected:
0 , < 12.0
(custom)
cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:* |
Date Public
2023-12-19 16:08
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "tl-wr841n_firmware",
"vendor": "tp-link",
"versions": [
{
"lessThan": "12.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50224",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-09-03T03:55:22.977218Z",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2025-09-03",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224"
},
"type": "kev"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-21T23:05:19.610Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-09-03T00:00:00.000Z",
"value": "CVE-2023-50224 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T22:09:49.801Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ZDI-23-1808",
"tags": [
"x_research-advisory",
"x_transferred"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/"
},
{
"name": "vendor-provided URL",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "TL-WR841N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "3.16.9 build 200409",
"versionType": "custom"
},
{
"status": "affected",
"version": "V8",
"versionType": "custom"
},
{
"status": "affected",
"version": "V9",
"versionType": "custom"
},
{
"status": "affected",
"version": "V10",
"versionType": "custom"
},
{
"status": "affected",
"version": "V11",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V11_211209",
"versionType": "custom"
},
{
"status": "affected",
"version": "V12",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V12_230317",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR841ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V8",
"versionType": "custom"
},
{
"status": "affected",
"version": "V9",
"versionType": "custom"
},
{
"status": "affected",
"version": "V10",
"versionType": "custom"
},
{
"status": "affected",
"version": "V11",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V11_211209",
"versionType": "custom"
},
{
"status": "affected",
"version": "V12",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V12_230317",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-MR6400",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
},
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Archer C5",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Archer C7",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V2_241108",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR3600",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR4300",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR3500",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR740N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
},
{
"status": "affected",
"version": "V7",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR741ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR749N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "BR 6.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "BR 7.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-MR3420",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR1043ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR1045ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "RU V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR840N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR842N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR842ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR845N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
},
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR941ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V6_220610",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR945N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WA801ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WA901ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V4_201030",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V5_201030",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2023-12-05T19:37:00.000Z",
"datePublic": "2023-12-19T16:08:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eTP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.\u003c/p\u003e"
}
],
"value": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-290",
"description": "CWE-290: Authentication Bypass by Spoofing",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-02T17:58:31.299Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-23-1808",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/"
},
{
"name": "vendor-provided URL",
"tags": [
"vendor-advisory"
],
"url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware"
},
{
"name": "vendor-advisory",
"tags": [
"vendor-advisory"
],
"url": "https://www.tp-link.com/us/support/faq/5058/"
}
],
"source": {
"lang": "en",
"value": "Aleksandar Djurdjevic \u0027revengsmK\u0027"
},
"title": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2023-50224",
"datePublished": "2024-05-03T02:14:42.922Z",
"dateReserved": "2023-12-05T16:15:17.543Z",
"dateUpdated": "2026-09-02T17:58:31.299Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2023-36358 (GCVE-0-2023-36358)
Vulnerability from nvd – Published: 2023-06-22 00:00 – Updated: 2024-12-10 21:12
VLAI
EPSS
VEX
Summary
TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.
Severity
7.7 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-12-10 21:10 UTC
CWE
- n/a
- CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Assigner
References
1 reference
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T16:45:56.683Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/6/TL-WR940N_WR941ND_WR743ND_WR841N_userRpm_AccessCtrlAccessTargetsRpm.md"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-36358",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-12-10T21:10:23.423059Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-12-10T21:12:28.618Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-06-22T00:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/6/TL-WR940N_WR941ND_WR743ND_WR841N_userRpm_AccessCtrlAccessTargetsRpm.md"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2023-36358",
"datePublished": "2023-06-22T00:00:00.000Z",
"dateReserved": "2023-06-21T00:00:00.000Z",
"dateUpdated": "2024-12-10T21:12:28.618Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50224 (GCVE-0-2023-50224)
Vulnerability from cvelistv5 – Published: 2024-05-03 02:14 – Updated: 2026-09-02 17:58Title
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
Summary
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
Severity
6.5 (Medium)
SSVC
Exploitation: active
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-09-03 03:55 UTC
CWE
- CWE-290 - Authentication Bypass by Spoofing
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-… | x_research-advisory |
| https://www.tp-link.com/en/support/download/tl-wr… | vendor-advisory |
| https://www.tp-link.com/us/support/faq/5058/ | vendor-advisory |
| https://www.cisa.gov/known-exploited-vulnerabilit… | government-resource |
Impacted products
23 products
| Vendor | Product | Version | |
|---|---|---|---|
| TP-Link | TL-WR841N |
Affected:
3.16.9 build 200409
(custom)
Affected: V8 (custom) Affected: V9 (custom) Affected: V10 (custom) Affected: V11 (custom) Unaffected: V11_211209 (custom) Affected: V12 (custom) Unaffected: V12_230317 (custom) |
|
| TP-Link | TL-WR841ND |
Affected:
V8
(custom)
Affected: V9 (custom) Affected: V10 (custom) Affected: V11 (custom) Unaffected: V11_211209 (custom) Affected: V12 (custom) Unaffected: V12_230317 (custom) |
|
| TP-Link | TL-MR6400 |
Affected:
V1
(custom)
Affected: V2 (custom) |
|
| TP-Link | Archer C5 |
Affected:
V2
(custom)
|
|
| TP-Link | Archer C7 |
Affected:
V2
(custom)
Unaffected: V2_241108 (custom) Affected: V3 (custom) |
|
| TP-Link | TL-WDR3600 |
Affected:
V2
(custom)
|
|
| TP-Link | TL-WDR4300 |
Affected:
V1
(custom)
|
|
| TP-Link | TL-WDR3500 |
Affected:
V2
(custom)
|
|
| TP-Link | TL-WR740N |
Affected:
V4
(custom)
Affected: V5 (custom) Affected: V6 (custom) Affected: V7 (custom) |
|
| TP-Link | TL-WR741ND |
Affected:
V4
(custom)
Affected: V5 (custom) Affected: V6 (custom) |
|
| TP-Link | TL-WR749N |
Affected:
BR 6.0
(custom)
Affected: BR 7.0 (custom) |
|
| TP-Link | TL-MR3420 |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR1043ND |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR1045ND |
Affected:
RU V2
(custom)
|
|
| TP-Link | TL-WR840N |
Affected:
V2
(custom)
Affected: V3 (custom) |
|
| TP-Link | TL-WR842N |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR842ND |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR845N |
Affected:
V1
(custom)
Affected: V2 (custom) |
|
| TP-Link | TL-WR941ND |
Affected:
V5
(custom)
Affected: V6 (custom) Unaffected: V6_220610 (custom) |
|
| TP-Link | TL-WR945N |
Affected:
V1
(custom)
|
|
| TP-Link | TL-WA801ND |
Affected:
V3
(custom)
Affected: V4 (custom) |
|
| TP-Link | TL-WA901ND |
Affected:
V3
(custom)
Affected: V4 (custom) Unaffected: V4_201030 (custom) Affected: V5 (custom) Unaffected: V5_201030 (custom) |
|
| tp-link | tl-wr841n_firmware |
Affected:
0 , < 12.0
(custom)
cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:* |
Date Public
2023-12-19 16:08
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "tl-wr841n_firmware",
"vendor": "tp-link",
"versions": [
{
"lessThan": "12.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50224",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-09-03T03:55:22.977218Z",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2025-09-03",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224"
},
"type": "kev"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-21T23:05:19.610Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-09-03T00:00:00.000Z",
"value": "CVE-2023-50224 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T22:09:49.801Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ZDI-23-1808",
"tags": [
"x_research-advisory",
"x_transferred"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/"
},
{
"name": "vendor-provided URL",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "TL-WR841N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "3.16.9 build 200409",
"versionType": "custom"
},
{
"status": "affected",
"version": "V8",
"versionType": "custom"
},
{
"status": "affected",
"version": "V9",
"versionType": "custom"
},
{
"status": "affected",
"version": "V10",
"versionType": "custom"
},
{
"status": "affected",
"version": "V11",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V11_211209",
"versionType": "custom"
},
{
"status": "affected",
"version": "V12",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V12_230317",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR841ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V8",
"versionType": "custom"
},
{
"status": "affected",
"version": "V9",
"versionType": "custom"
},
{
"status": "affected",
"version": "V10",
"versionType": "custom"
},
{
"status": "affected",
"version": "V11",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V11_211209",
"versionType": "custom"
},
{
"status": "affected",
"version": "V12",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V12_230317",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-MR6400",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
},
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Archer C5",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Archer C7",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V2_241108",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR3600",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR4300",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR3500",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR740N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
},
{
"status": "affected",
"version": "V7",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR741ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR749N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "BR 6.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "BR 7.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-MR3420",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR1043ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR1045ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "RU V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR840N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR842N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR842ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR845N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
},
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR941ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V6_220610",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR945N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WA801ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WA901ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V4_201030",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V5_201030",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2023-12-05T19:37:00.000Z",
"datePublic": "2023-12-19T16:08:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eTP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.\u003c/p\u003e"
}
],
"value": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-290",
"description": "CWE-290: Authentication Bypass by Spoofing",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-02T17:58:31.299Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-23-1808",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/"
},
{
"name": "vendor-provided URL",
"tags": [
"vendor-advisory"
],
"url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware"
},
{
"name": "vendor-advisory",
"tags": [
"vendor-advisory"
],
"url": "https://www.tp-link.com/us/support/faq/5058/"
}
],
"source": {
"lang": "en",
"value": "Aleksandar Djurdjevic \u0027revengsmK\u0027"
},
"title": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2023-50224",
"datePublished": "2024-05-03T02:14:42.922Z",
"dateReserved": "2023-12-05T16:15:17.543Z",
"dateUpdated": "2026-09-02T17:58:31.299Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2023-36358 (GCVE-0-2023-36358)
Vulnerability from cvelistv5 – Published: 2023-06-22 00:00 – Updated: 2024-12-10 21:12
VLAI
EPSS
VEX
Summary
TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.
Severity
7.7 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-12-10 21:10 UTC
CWE
- n/a
- CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Assigner
References
1 reference
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T16:45:56.683Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/6/TL-WR940N_WR941ND_WR743ND_WR841N_userRpm_AccessCtrlAccessTargetsRpm.md"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-36358",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-12-10T21:10:23.423059Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-12-10T21:12:28.618Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-06-22T00:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/6/TL-WR940N_WR941ND_WR743ND_WR841N_userRpm_AccessCtrlAccessTargetsRpm.md"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2023-36358",
"datePublished": "2023-06-22T00:00:00.000Z",
"dateReserved": "2023-06-21T00:00:00.000Z",
"dateUpdated": "2024-12-10T21:12:28.618Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}