Search
Find a vulnerability
Search criteria
4 vulnerabilities found for tl-wr840n by tp-link
CVE-2023-50224 (GCVE-0-2023-50224)
Vulnerability from nvd – Published: 2024-05-03 02:14 – Updated: 2026-09-02 17:58Title
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
Summary
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
Severity
6.5 (Medium)
SSVC
Exploitation: active
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-09-03 03:55 UTC
CWE
- CWE-290 - Authentication Bypass by Spoofing
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-… | x_research-advisory |
| https://www.tp-link.com/en/support/download/tl-wr… | vendor-advisory |
| https://www.tp-link.com/us/support/faq/5058/ | vendor-advisory |
| https://www.cisa.gov/known-exploited-vulnerabilit… | government-resource |
Impacted products
23 products
| Vendor | Product | Version | |
|---|---|---|---|
| TP-Link | TL-WR841N |
Affected:
3.16.9 build 200409
(custom)
Affected: V8 (custom) Affected: V9 (custom) Affected: V10 (custom) Affected: V11 (custom) Unaffected: V11_211209 (custom) Affected: V12 (custom) Unaffected: V12_230317 (custom) |
|
| TP-Link | TL-WR841ND |
Affected:
V8
(custom)
Affected: V9 (custom) Affected: V10 (custom) Affected: V11 (custom) Unaffected: V11_211209 (custom) Affected: V12 (custom) Unaffected: V12_230317 (custom) |
|
| TP-Link | TL-MR6400 |
Affected:
V1
(custom)
Affected: V2 (custom) |
|
| TP-Link | Archer C5 |
Affected:
V2
(custom)
|
|
| TP-Link | Archer C7 |
Affected:
V2
(custom)
Unaffected: V2_241108 (custom) Affected: V3 (custom) |
|
| TP-Link | TL-WDR3600 |
Affected:
V2
(custom)
|
|
| TP-Link | TL-WDR4300 |
Affected:
V1
(custom)
|
|
| TP-Link | TL-WDR3500 |
Affected:
V2
(custom)
|
|
| TP-Link | TL-WR740N |
Affected:
V4
(custom)
Affected: V5 (custom) Affected: V6 (custom) Affected: V7 (custom) |
|
| TP-Link | TL-WR741ND |
Affected:
V4
(custom)
Affected: V5 (custom) Affected: V6 (custom) |
|
| TP-Link | TL-WR749N |
Affected:
BR 6.0
(custom)
Affected: BR 7.0 (custom) |
|
| TP-Link | TL-MR3420 |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR1043ND |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR1045ND |
Affected:
RU V2
(custom)
|
|
| TP-Link | TL-WR840N |
Affected:
V2
(custom)
Affected: V3 (custom) |
|
| TP-Link | TL-WR842N |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR842ND |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR845N |
Affected:
V1
(custom)
Affected: V2 (custom) |
|
| TP-Link | TL-WR941ND |
Affected:
V5
(custom)
Affected: V6 (custom) Unaffected: V6_220610 (custom) |
|
| TP-Link | TL-WR945N |
Affected:
V1
(custom)
|
|
| TP-Link | TL-WA801ND |
Affected:
V3
(custom)
Affected: V4 (custom) |
|
| TP-Link | TL-WA901ND |
Affected:
V3
(custom)
Affected: V4 (custom) Unaffected: V4_201030 (custom) Affected: V5 (custom) Unaffected: V5_201030 (custom) |
|
| tp-link | tl-wr841n_firmware |
Affected:
0 , < 12.0
(custom)
cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:* |
Date Public
2023-12-19 16:08
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "tl-wr841n_firmware",
"vendor": "tp-link",
"versions": [
{
"lessThan": "12.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50224",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-09-03T03:55:22.977218Z",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2025-09-03",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224"
},
"type": "kev"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-21T23:05:19.610Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-09-03T00:00:00.000Z",
"value": "CVE-2023-50224 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T22:09:49.801Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ZDI-23-1808",
"tags": [
"x_research-advisory",
"x_transferred"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/"
},
{
"name": "vendor-provided URL",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "TL-WR841N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "3.16.9 build 200409",
"versionType": "custom"
},
{
"status": "affected",
"version": "V8",
"versionType": "custom"
},
{
"status": "affected",
"version": "V9",
"versionType": "custom"
},
{
"status": "affected",
"version": "V10",
"versionType": "custom"
},
{
"status": "affected",
"version": "V11",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V11_211209",
"versionType": "custom"
},
{
"status": "affected",
"version": "V12",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V12_230317",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR841ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V8",
"versionType": "custom"
},
{
"status": "affected",
"version": "V9",
"versionType": "custom"
},
{
"status": "affected",
"version": "V10",
"versionType": "custom"
},
{
"status": "affected",
"version": "V11",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V11_211209",
"versionType": "custom"
},
{
"status": "affected",
"version": "V12",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V12_230317",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-MR6400",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
},
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Archer C5",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Archer C7",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V2_241108",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR3600",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR4300",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR3500",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR740N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
},
{
"status": "affected",
"version": "V7",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR741ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR749N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "BR 6.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "BR 7.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-MR3420",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR1043ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR1045ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "RU V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR840N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR842N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR842ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR845N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
},
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR941ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V6_220610",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR945N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WA801ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WA901ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V4_201030",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V5_201030",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2023-12-05T19:37:00.000Z",
"datePublic": "2023-12-19T16:08:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eTP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.\u003c/p\u003e"
}
],
"value": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-290",
"description": "CWE-290: Authentication Bypass by Spoofing",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-02T17:58:31.299Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-23-1808",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/"
},
{
"name": "vendor-provided URL",
"tags": [
"vendor-advisory"
],
"url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware"
},
{
"name": "vendor-advisory",
"tags": [
"vendor-advisory"
],
"url": "https://www.tp-link.com/us/support/faq/5058/"
}
],
"source": {
"lang": "en",
"value": "Aleksandar Djurdjevic \u0027revengsmK\u0027"
},
"title": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2023-50224",
"datePublished": "2024-05-03T02:14:42.922Z",
"dateReserved": "2023-12-05T16:15:17.543Z",
"dateUpdated": "2026-09-02T17:58:31.299Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2023-39471 (GCVE-0-2023-39471)
Vulnerability from nvd – Published: 2024-05-03 02:10 – Updated: 2024-08-02 18:10
VLAI
EPSS
VEX
Title
TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability
Summary
TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the ated_tp service. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21825.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-07-05 17:18 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-… | x_research-advisory |
Impacted products
Date Public
2023-11-14 21:52
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:h:tp-link:tl-wr841n:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "tl-wr841n",
"vendor": "tp-link",
"versions": [
{
"lessThan": "14",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:tp-link:tl-wr840n:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "tl-wr840n",
"vendor": "tp-link",
"versions": [
{
"lessThan": "6.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-39471",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-05T17:18:20.131303Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-05T21:00:28.982Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T18:10:20.683Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ZDI-23-1624",
"tags": [
"x_research-advisory",
"x_transferred"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1624/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "TL-WR841N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "4.19"
}
]
}
],
"dateAssigned": "2023-08-02T21:44:31.477Z",
"datePublic": "2023-11-14T21:52:07.894Z",
"descriptions": [
{
"lang": "en",
"value": "TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the ated_tp service. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21825."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-03T02:10:38.498Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-23-1624",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1624/"
}
],
"source": {
"lang": "en",
"value": "Theori"
},
"title": "TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2023-39471",
"datePublished": "2024-05-03T02:10:38.498Z",
"dateReserved": "2023-08-02T21:37:23.124Z",
"dateUpdated": "2024-08-02T18:10:20.683Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50224 (GCVE-0-2023-50224)
Vulnerability from cvelistv5 – Published: 2024-05-03 02:14 – Updated: 2026-09-02 17:58Title
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
Summary
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
Severity
6.5 (Medium)
SSVC
Exploitation: active
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-09-03 03:55 UTC
CWE
- CWE-290 - Authentication Bypass by Spoofing
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-… | x_research-advisory |
| https://www.tp-link.com/en/support/download/tl-wr… | vendor-advisory |
| https://www.tp-link.com/us/support/faq/5058/ | vendor-advisory |
| https://www.cisa.gov/known-exploited-vulnerabilit… | government-resource |
Impacted products
23 products
| Vendor | Product | Version | |
|---|---|---|---|
| TP-Link | TL-WR841N |
Affected:
3.16.9 build 200409
(custom)
Affected: V8 (custom) Affected: V9 (custom) Affected: V10 (custom) Affected: V11 (custom) Unaffected: V11_211209 (custom) Affected: V12 (custom) Unaffected: V12_230317 (custom) |
|
| TP-Link | TL-WR841ND |
Affected:
V8
(custom)
Affected: V9 (custom) Affected: V10 (custom) Affected: V11 (custom) Unaffected: V11_211209 (custom) Affected: V12 (custom) Unaffected: V12_230317 (custom) |
|
| TP-Link | TL-MR6400 |
Affected:
V1
(custom)
Affected: V2 (custom) |
|
| TP-Link | Archer C5 |
Affected:
V2
(custom)
|
|
| TP-Link | Archer C7 |
Affected:
V2
(custom)
Unaffected: V2_241108 (custom) Affected: V3 (custom) |
|
| TP-Link | TL-WDR3600 |
Affected:
V2
(custom)
|
|
| TP-Link | TL-WDR4300 |
Affected:
V1
(custom)
|
|
| TP-Link | TL-WDR3500 |
Affected:
V2
(custom)
|
|
| TP-Link | TL-WR740N |
Affected:
V4
(custom)
Affected: V5 (custom) Affected: V6 (custom) Affected: V7 (custom) |
|
| TP-Link | TL-WR741ND |
Affected:
V4
(custom)
Affected: V5 (custom) Affected: V6 (custom) |
|
| TP-Link | TL-WR749N |
Affected:
BR 6.0
(custom)
Affected: BR 7.0 (custom) |
|
| TP-Link | TL-MR3420 |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR1043ND |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR1045ND |
Affected:
RU V2
(custom)
|
|
| TP-Link | TL-WR840N |
Affected:
V2
(custom)
Affected: V3 (custom) |
|
| TP-Link | TL-WR842N |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR842ND |
Affected:
V2
(custom)
Affected: V3 (custom) Affected: V4 (custom) |
|
| TP-Link | TL-WR845N |
Affected:
V1
(custom)
Affected: V2 (custom) |
|
| TP-Link | TL-WR941ND |
Affected:
V5
(custom)
Affected: V6 (custom) Unaffected: V6_220610 (custom) |
|
| TP-Link | TL-WR945N |
Affected:
V1
(custom)
|
|
| TP-Link | TL-WA801ND |
Affected:
V3
(custom)
Affected: V4 (custom) |
|
| TP-Link | TL-WA901ND |
Affected:
V3
(custom)
Affected: V4 (custom) Unaffected: V4_201030 (custom) Affected: V5 (custom) Unaffected: V5_201030 (custom) |
|
| tp-link | tl-wr841n_firmware |
Affected:
0 , < 12.0
(custom)
cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:* |
Date Public
2023-12-19 16:08
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "tl-wr841n_firmware",
"vendor": "tp-link",
"versions": [
{
"lessThan": "12.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50224",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-09-03T03:55:22.977218Z",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2025-09-03",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224"
},
"type": "kev"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-21T23:05:19.610Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-09-03T00:00:00.000Z",
"value": "CVE-2023-50224 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T22:09:49.801Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ZDI-23-1808",
"tags": [
"x_research-advisory",
"x_transferred"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/"
},
{
"name": "vendor-provided URL",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "TL-WR841N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "3.16.9 build 200409",
"versionType": "custom"
},
{
"status": "affected",
"version": "V8",
"versionType": "custom"
},
{
"status": "affected",
"version": "V9",
"versionType": "custom"
},
{
"status": "affected",
"version": "V10",
"versionType": "custom"
},
{
"status": "affected",
"version": "V11",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V11_211209",
"versionType": "custom"
},
{
"status": "affected",
"version": "V12",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V12_230317",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR841ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V8",
"versionType": "custom"
},
{
"status": "affected",
"version": "V9",
"versionType": "custom"
},
{
"status": "affected",
"version": "V10",
"versionType": "custom"
},
{
"status": "affected",
"version": "V11",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V11_211209",
"versionType": "custom"
},
{
"status": "affected",
"version": "V12",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V12_230317",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-MR6400",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
},
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Archer C5",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Archer C7",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V2_241108",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR3600",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR4300",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR3500",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR740N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
},
{
"status": "affected",
"version": "V7",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR741ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR749N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "BR 6.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "BR 7.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-MR3420",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR1043ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR1045ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "RU V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR840N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR842N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR842ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR845N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
},
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR941ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V6_220610",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR945N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WA801ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WA901ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V4_201030",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V5_201030",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2023-12-05T19:37:00.000Z",
"datePublic": "2023-12-19T16:08:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eTP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.\u003c/p\u003e"
}
],
"value": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-290",
"description": "CWE-290: Authentication Bypass by Spoofing",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-02T17:58:31.299Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-23-1808",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/"
},
{
"name": "vendor-provided URL",
"tags": [
"vendor-advisory"
],
"url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware"
},
{
"name": "vendor-advisory",
"tags": [
"vendor-advisory"
],
"url": "https://www.tp-link.com/us/support/faq/5058/"
}
],
"source": {
"lang": "en",
"value": "Aleksandar Djurdjevic \u0027revengsmK\u0027"
},
"title": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2023-50224",
"datePublished": "2024-05-03T02:14:42.922Z",
"dateReserved": "2023-12-05T16:15:17.543Z",
"dateUpdated": "2026-09-02T17:58:31.299Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2023-39471 (GCVE-0-2023-39471)
Vulnerability from cvelistv5 – Published: 2024-05-03 02:10 – Updated: 2024-08-02 18:10
VLAI
EPSS
VEX
Title
TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability
Summary
TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the ated_tp service. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21825.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-07-05 17:18 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-… | x_research-advisory |
Impacted products
Date Public
2023-11-14 21:52
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:h:tp-link:tl-wr841n:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "tl-wr841n",
"vendor": "tp-link",
"versions": [
{
"lessThan": "14",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:tp-link:tl-wr840n:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "tl-wr840n",
"vendor": "tp-link",
"versions": [
{
"lessThan": "6.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-39471",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-05T17:18:20.131303Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-05T21:00:28.982Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T18:10:20.683Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ZDI-23-1624",
"tags": [
"x_research-advisory",
"x_transferred"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1624/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "TL-WR841N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "4.19"
}
]
}
],
"dateAssigned": "2023-08-02T21:44:31.477Z",
"datePublic": "2023-11-14T21:52:07.894Z",
"descriptions": [
{
"lang": "en",
"value": "TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the ated_tp service. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21825."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-05-03T02:10:38.498Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-23-1624",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1624/"
}
],
"source": {
"lang": "en",
"value": "Theori"
},
"title": "TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2023-39471",
"datePublished": "2024-05-03T02:10:38.498Z",
"dateReserved": "2023-08-02T21:37:23.124Z",
"dateUpdated": "2024-08-02T18:10:20.683Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}