CVE-2023-50224 - Vulnerability Details

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is in the KEV database since Sept. 3, 2025.

The EPSS score is 0.15558.

Exploitation active

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

TP-Link

TL-WR841N

affected

Version	Status	Constraints
`3.16.9 build 200409`	affected	—
`V8`	affected	—
`V9`	affected	—
`V10`	affected	—
`V11`	affected	—
`V11_211209`	unaffected	—
`V12`	affected	—
`V12_230317`	unaffected	—

TP-Link

TL-WR841ND

affected

Version	Status	Constraints
`V8`	affected	—
`V9`	affected	—
`V10`	affected	—
`V11`	affected	—
`V11_211209`	unaffected	—
`V12`	affected	—
`V12_230317`	unaffected	—

TP-Link

TL-MR6400

affected

Version	Status	Constraints
`V1`	affected	—
`V2`	affected	—

TP-Link

Archer C5

affected

Version	Status	Constraints
`V2`	affected	—

TP-Link

Archer C7

affected

Version	Status	Constraints
`V2`	affected	—
`V2_241108`	unaffected	—
`V3`	affected	—

TP-Link

TL-WDR3600

affected

Version	Status	Constraints
`V2`	affected	—

TP-Link

TL-WDR4300

affected

Version	Status	Constraints
`V1`	affected	—

TP-Link

TL-WDR3500

affected

Version	Status	Constraints
`V2`	affected	—

TP-Link

TL-WR740N

affected

Version	Status	Constraints
`V4`	affected	—
`V5`	affected	—
`V6`	affected	—
`V7`	affected	—

TP-Link

TL-WR741ND

affected

Version	Status	Constraints
`V4`	affected	—
`V5`	affected	—
`V6`	affected	—

TP-Link

TL-WR749N

affected

Version	Status	Constraints
`BR 6.0`	affected	—
`BR 7.0`	affected	—

TP-Link

TL-MR3420

affected

Version	Status	Constraints
`V2`	affected	—
`V3`	affected	—
`V4`	affected	—

TP-Link

TL-WR1043ND

affected

Version	Status	Constraints
`V2`	affected	—
`V3`	affected	—
`V4`	affected	—

TP-Link

TL-WR1045ND

affected

Version	Status	Constraints
`RU V2`	affected	—

TP-Link

TL-WR840N

affected

Version	Status	Constraints
`V2`	affected	—
`V3`	affected	—

TP-Link

TL-WR842N

affected

Version	Status	Constraints
`V2`	affected	—
`V3`	affected	—
`V4`	affected	—

TP-Link

TL-WR842ND

affected

Version	Status	Constraints
`V2`	affected	—
`V3`	affected	—
`V4`	affected	—

TP-Link

TL-WR845N

affected

Version	Status	Constraints
`V1`	affected	—
`V2`	affected	—

TP-Link

TL-WR941ND

affected

Version	Status	Constraints
`V5`	affected	—
`V6`	affected	—
`V6_220610`	unaffected	—

TP-Link

TL-WR945N

affected

Version	Status	Constraints
`V1`	affected	—

TP-Link

TL-WA801ND

affected

Version	Status	Constraints
`V3`	affected	—
`V4`	affected	—

TP-Link

TL-WA901ND

affected

Version	Status	Constraints
`V3`	affected	—
`V4`	affected	—
`V4_201030`	unaffected	—
`V5`	affected	—
`V5_201030`	unaffected	—

Configuration 1 [-]

AND

cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr841n:8.0:::::::*
	cpe:2.3:h:tp-link:tl-wr841n:9:::::::*
	cpe:2.3:h:tp-link:tl-wr841n:10:::::::*

Configuration 2 [-]

AND

cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr841n:11:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr841n:12:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:tp-link:mr6400_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:mr6400:1.0:::::::*
	cpe:2.3:h:tp-link:mr6400:2.0:::::::*

Configuration 5 [-]

AND

cpe:2.3:o:tp-link:tl-wdr3600_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wdr3600:2.0:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:tp-link:tl-wdr4300_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wdr4300:1:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:tp-link:wdr3500_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wdr3500:2.0:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:tp-link:tl-wr710n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr710n:1.0:::::::*
	cpe:2.3:h:tp-link:tl-wr710n:2.0:::::::*

Configuration 9 [-]

AND

cpe:2.3:o:tp-link:tl-wr740n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr740n:4.0:::::::*
	cpe:2.3:h:tp-link:tl-wr740n:5.0:::::::*
	cpe:2.3:h:tp-link:tl-wr740n:6.0:::::::*
	cpe:2.3:h:tp-link:tl-wr740n:7.0:::::::*

Configuration 10 [-]

AND

cpe:2.3:o:tp-link:tl-wr741nd_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr741nd:2.0:::::::*
	cpe:2.3:h:tp-link:tl-wr741nd:4.0:::::::*
	cpe:2.3:h:tp-link:tl-wr741nd:5:::::::*
	cpe:2.3:h:tp-link:tl-wr741nd:6.0:::::::*

Configuration 11 [-]

AND

cpe:2.3:o:tp-link:tl-wr743nd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr743nd:2.0:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:tp-link:wr749n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wr749n:6.0:::::::*
	cpe:2.3:h:tp-link:wr749n:7.0:::::::*

Configuration 13 [-]

AND

cpe:2.3:o:tp-link:mr3420_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:mr3420:2.0:::::::*
	cpe:2.3:h:tp-link:mr3420:3.0:::::::*
	cpe:2.3:h:tp-link:mr3420:4.0:::::::*

Configuration 14 [-]

AND

cpe:2.3:o:tp-link:wr1043nd_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wr1043nd:2.0:::::::*
	cpe:2.3:h:tp-link:wr1043nd:3.0:::::::*
	cpe:2.3:h:tp-link:wr1043nd:4.0:::::::*

Configuration 15 [-]

AND

cpe:2.3:o:tp-link:wr1045nd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wr1045nd:2.0:*:*:*:*:*:*:*

Configuration 16 [-]

AND

cpe:2.3:o:tp-link:wr802n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wr802n:1.0:::::::*
	cpe:2.3:h:tp-link:wr802n:2.0:::::::*
	cpe:2.3:h:tp-link:wr802n:3.0:::::::*

Configuration 17 [-]

AND

cpe:2.3:o:tp-link:tl-wr810n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr810n:1.0:::::::*
	cpe:2.3:h:tp-link:tl-wr810n:2.0:::::::*

Configuration 18 [-]

AND

cpe:2.3:o:tp-link:tl-wr840n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr840n:2.0:::::::*
	cpe:2.3:h:tp-link:tl-wr840n:3.0:::::::*

Configuration 19 [-]

AND

cpe:2.3:o:tp-link:wr841hp_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wr841hp:2.0:::::::*
	cpe:2.3:h:tp-link:wr841hp:3.0:::::::*

Configuration 20 [-]

AND

cpe:2.3:o:tp-link:tl-wr841nd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr841nd:11.0:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:tp-link:wr842n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wr842n:2.0:::::::*
	cpe:2.3:h:tp-link:wr842n:3.0:::::::*
	cpe:2.3:h:tp-link:wr842n:4.0:::::::*

Configuration 22 [-]

AND

cpe:2.3:o:tp-link:wr842nd_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wr842nd:2.0:::::::*
	cpe:2.3:h:tp-link:wr842nd:3.0:::::::*
	cpe:2.3:h:tp-link:wr842nd:4.0:::::::*

Configuration 23 [-]

AND

cpe:2.3:o:tp-link:tl-wr843n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr843n:2.0:::::::*
	cpe:2.3:h:tp-link:tl-wr843n:3.0:::::::*

Configuration 24 [-]

AND

cpe:2.3:o:tp-link:wr845n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wr845n:1.0:::::::*
	cpe:2.3:h:tp-link:wr845n:2.0:::::::*

Configuration 25 [-]

AND

cpe:2.3:o:tp-link:wr945n_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wr945n:1.0:*:*:*:*:*:*:*

Configuration 26 [-]

AND

cpe:2.3:o:tp-link:tl-mr3020_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-mr3020:1.0:*:*:*:*:*:*:*

Configuration 27 [-]

AND

cpe:2.3:o:tp-link:tl-mr3220_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-mr3220:2.0:*:*:*:*:*:*:*

Configuration 28 [-]

AND

cpe:2.3:o:tp-link:mr3420_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:mr3420:2.0:::::::*
	cpe:2.3:h:tp-link:mr3420:3.0:::::::*

Configuration 29 [-]

AND

cpe:2.3:o:tp-link:wa701nd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wa701nd:2.0:*:*:*:*:*:*:*

Configuration 30 [-]

AND

cpe:2.3:o:tp-link:wa801nd_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:wa801nd:3.0:::::::*
	cpe:2.3:h:tp-link:wa801nd:4.0:::::::*

Configuration 31 [-]

AND

cpe:2.3:o:tp-link:archer_c5_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_c5:2.0:*:*:*:*:*:*:*

Configuration 32 [-]

AND

cpe:2.3:o:tp-link:archer_c7_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_c7:2.0:*:*:*:*:*:*:*

Configuration 33 [-]

AND

cpe:2.3:o:tp-link:archer_c7_firmware:3_150508:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_c7:3.0:*:*:*:*:*:*:*

Configuration 34 [-]

AND

cpe:2.3:o:tp-link:archer_c1900_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:archer_c1900:1.0:*:*:*:*:*:*:*

Configuration 35 [-]

AND

OR	cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_160905:::::::*
	cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_170628:::::::*

cpe:2.3:h:tp-link:tl-wr902ac:1:*:*:*:*:*:*:*

Configuration 36 [-]

AND

cpe:2.3:o:tp-link:tl-wr940n_firmware:-:*:*:*:*:*:*:*

OR	cpe:2.3:h:tp-link:tl-wr940n:2.0:::::::*
	cpe:2.3:h:tp-link:tl-wr940n:4.0:::::::*
	cpe:2.3:h:tp-link:tl-wr940n:v3:::::::*

Configuration 37 [-]

AND

cpe:2.3:o:tp-link:tl-wr940n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr940n:5.0:*:*:*:*:*:*:*

Configuration 38 [-]

AND

cpe:2.3:o:tp-link:tl-wr940n_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr940n:v6:*:*:*:*:*:*:*

Configuration 39 [-]

AND

OR	cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_170704:::::::*
	cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_171115:::::::*

cpe:2.3:h:tp-link:tl-wr940n_plus:6.0:*:*:*:*:*:*:*

Configuration 40 [-]

AND

cpe:2.3:o:tp-link:wr941hp_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wr941hp:1.0:*:*:*:*:*:*:*

Configuration 41 [-]

AND

cpe:2.3:o:tp-link:tl-wr941nd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr941nd:v5:*:*:*:*:*:*:*

Configuration 42 [-]

AND

cpe:2.3:o:tp-link:tl-wr941nd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wr941nd:v6:*:*:*:*:*:*:*

Configuration 43 [-]

AND

cpe:2.3:o:tp-link:wa901nd_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wa901nd:3.0:*:*:*:*:*:*:*

Configuration 44 [-]

AND

cpe:2.3:o:tp-link:wa901nd_firmware:5_160929:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wa901nd:5.0:*:*:*:*:*:*:*

Configuration 45 [-]

AND

cpe:2.3:o:tp-link:wa901nd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wa901nd:6.0:*:*:*:*:*:*:*

Configuration 46 [-]

AND

cpe:2.3:o:tp-link:wa901nd_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:wa901nd:4.0:*:*:*:*:*:*:*

No data.

Project Subscriptions

Vendors	Products
Tp-link Subscribe	Archer C1900 Subscribe Archer C1900 Firmware Subscribe Archer C5 Subscribe Archer C5 Firmware Subscribe Archer C7 Subscribe Archer C7 Firmware Subscribe Mr3420 Subscribe Mr3420 Firmware Subscribe Mr6400 Subscribe Mr6400 Firmware Subscribe Tl-mr3020 Subscribe Tl-mr3020 Firmware Subscribe Tl-mr3220 Subscribe Tl-mr3220 Firmware Subscribe Tl-wdr3600 Subscribe Tl-wdr3600 Firmware Subscribe Tl-wdr4300 Subscribe Tl-wdr4300 Firmware Subscribe Tl-wr710n Subscribe Tl-wr710n Firmware Subscribe Tl-wr740n Subscribe Tl-wr740n Firmware Subscribe Tl-wr741nd Subscribe Tl-wr741nd Firmware Subscribe Tl-wr743nd Subscribe Tl-wr743nd Firmware Subscribe Tl-wr810n Subscribe Tl-wr810n Firmware Subscribe Tl-wr840n Subscribe Tl-wr840n Firmware Subscribe Tl-wr841n Subscribe Tl-wr841n Firmware Subscribe Tl-wr841nd Subscribe Tl-wr841nd Firmware Subscribe Tl-wr843n Subscribe Tl-wr843n Firmware Subscribe Tl-wr902ac Subscribe Tl-wr902ac Firmware Subscribe Tl-wr940n Subscribe Tl-wr940n Firmware Subscribe Tl-wr940n Plus Subscribe Tl-wr940n Plus Firmware Subscribe Tl-wr941nd Subscribe Tl-wr941nd Firmware Subscribe Wa701nd Subscribe Wa701nd Firmware Subscribe Wa801nd Subscribe Wa801nd Firmware Subscribe Wa901nd Subscribe Wa901nd Firmware Subscribe Wdr3500 Subscribe Wdr3500 Firmware Subscribe Wr1043nd Subscribe Wr1043nd Firmware Subscribe Wr1045nd Subscribe Wr1045nd Firmware Subscribe Wr749n Subscribe Wr749n Firmware Subscribe Wr802n Subscribe Wr802n Firmware Subscribe Wr841hp Subscribe Wr841hp Firmware Subscribe Wr842n Subscribe Wr842n Firmware Subscribe Wr842nd Subscribe Wr842nd Firmware Subscribe Wr845n Subscribe Wr845n Firmware Subscribe Wr941hp Subscribe Wr941hp Firmware Subscribe Wr945n Subscribe Wr945n Firmware Subscribe

Advisories

Source	ID	Title
EUVD	EUVD-2023-55046	TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. . Was ZDI-CAN-19899.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224
https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware
https://www.tp-link.com/us/support/faq/5058/
https://www.zerodayinitiative.com/advisories/ZDI-23-1808/

History

Thu, 03 Sep 2026 17:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Tp-link archer C1900 Tp-link archer C1900 Firmware Tp-link archer C5 Tp-link archer C5 Firmware Tp-link archer C7 Tp-link archer C7 Firmware Tp-link mr3420 Tp-link mr3420 Firmware Tp-link mr6400 Tp-link mr6400 Firmware Tp-link tl-mr3020 Tp-link tl-mr3020 Firmware Tp-link tl-mr3220 Tp-link tl-mr3220 Firmware Tp-link tl-wdr3600 Tp-link tl-wdr3600 Firmware Tp-link tl-wdr4300 Tp-link tl-wdr4300 Firmware Tp-link tl-wr710n Tp-link tl-wr710n Firmware Tp-link tl-wr740n Tp-link tl-wr740n Firmware Tp-link tl-wr741nd Tp-link tl-wr741nd Firmware Tp-link tl-wr743nd Tp-link tl-wr743nd Firmware Tp-link tl-wr810n Tp-link tl-wr810n Firmware Tp-link tl-wr840n Tp-link tl-wr840n Firmware Tp-link tl-wr841nd Tp-link tl-wr841nd Firmware Tp-link tl-wr843n Tp-link tl-wr843n Firmware Tp-link tl-wr902ac Tp-link tl-wr902ac Firmware Tp-link tl-wr940n Tp-link tl-wr940n Firmware Tp-link tl-wr940n Plus Tp-link tl-wr940n Plus Firmware Tp-link tl-wr941nd Tp-link tl-wr941nd Firmware Tp-link wa701nd Tp-link wa701nd Firmware Tp-link wa801nd Tp-link wa801nd Firmware Tp-link wa901nd Tp-link wa901nd Firmware Tp-link wdr3500 Tp-link wdr3500 Firmware Tp-link wr1043nd Tp-link wr1043nd Firmware Tp-link wr1045nd Tp-link wr1045nd Firmware Tp-link wr749n Tp-link wr749n Firmware Tp-link wr802n Tp-link wr802n Firmware Tp-link wr841hp Tp-link wr841hp Firmware Tp-link wr842n Tp-link wr842n Firmware Tp-link wr842nd Tp-link wr842nd Firmware Tp-link wr845n Tp-link wr845n Firmware Tp-link wr941hp Tp-link wr941hp Firmware Tp-link wr945n Tp-link wr945n Firmware
CPEs	cpe:2.3:o:tp-link:tl-wr841n_firmware:3.16.9:build_200409::::::	cpe:2.3:h:tp-link:archer_c1900:1.0:::::::* cpe:2.3:h:tp-link:archer_c5:2.0:::::::* cpe:2.3:h:tp-link:archer_c7:2.0:::::::* cpe:2.3:h:tp-link:archer_c7:3.0:::::::* cpe:2.3:h:tp-link:mr3420:2.0:::::::* cpe:2.3:h:tp-link:mr3420:3.0:::::::* cpe:2.3:h:tp-link:mr3420:4.0:::::::* cpe:2.3:h:tp-link:mr6400:1.0:::::::* cpe:2.3:h:tp-link:mr6400:2.0:::::::* cpe:2.3:h:tp-link:tl-mr3020:1.0:::::::* cpe:2.3:h:tp-link:tl-mr3220:2.0:::::::* cpe:2.3:h:tp-link:tl-wdr3600:2.0:::::::* cpe:2.3:h:tp-link:tl-wdr4300:1:::::::* cpe:2.3:h:tp-link:tl-wr710n:1.0:::::::* cpe:2.3:h:tp-link:tl-wr710n:2.0:::::::* cpe:2.3:h:tp-link:tl-wr740n:4.0:::::::* cpe:2.3:h:tp-link:tl-wr740n:5.0:::::::* cpe:2.3:h:tp-link:tl-wr740n:6.0:::::::* cpe:2.3:h:tp-link:tl-wr740n:7.0:::::::* cpe:2.3:h:tp-link:tl-wr741nd:2.0:::::::* cpe:2.3:h:tp-link:tl-wr741nd:4.0:::::::* cpe:2.3:h:tp-link:tl-wr741nd:5:::::::* cpe:2.3:h:tp-link:tl-wr741nd:6.0:::::::* cpe:2.3:h:tp-link:tl-wr743nd:2.0:::::::* cpe:2.3:h:tp-link:tl-wr810n:1.0:::::::* cpe:2.3:h:tp-link:tl-wr810n:2.0:::::::* cpe:2.3:h:tp-link:tl-wr840n:2.0:::::::* cpe:2.3:h:tp-link:tl-wr840n:3.0:::::::* cpe:2.3:h:tp-link:tl-wr841n:10:::::::* cpe:2.3:h:tp-link:tl-wr841n:11:::::::* cpe:2.3:h:tp-link:tl-wr841n:8.0:::::::* cpe:2.3:h:tp-link:tl-wr841n:9:::::::* cpe:2.3:h:tp-link:tl-wr841nd:11.0:::::::* cpe:2.3:h:tp-link:tl-wr843n:2.0:::::::* cpe:2.3:h:tp-link:tl-wr843n:3.0:::::::* cpe:2.3:h:tp-link:tl-wr902ac:1:::::::* cpe:2.3:h:tp-link:tl-wr940n:2.0:::::::* cpe:2.3:h:tp-link:tl-wr940n:4.0:::::::* cpe:2.3:h:tp-link:tl-wr940n:5.0:::::::* cpe:2.3:h:tp-link:tl-wr940n:v3:::::::* cpe:2.3:h:tp-link:tl-wr940n:v6:::::::* cpe:2.3:h:tp-link:tl-wr940n_plus:6.0:::::::* cpe:2.3:h:tp-link:tl-wr941nd:v5:::::::* cpe:2.3:h:tp-link:tl-wr941nd:v6:::::::* cpe:2.3:h:tp-link:wa701nd:2.0:::::::* cpe:2.3:h:tp-link:wa801nd:3.0:::::::* cpe:2.3:h:tp-link:wa801nd:4.0:::::::* cpe:2.3:h:tp-link:wa901nd:3.0:::::::* cpe:2.3:h:tp-link:wa901nd:4.0:::::::* cpe:2.3:h:tp-link:wa901nd:5.0:::::::* cpe:2.3:h:tp-link:wa901nd:6.0:::::::* cpe:2.3:h:tp-link:wdr3500:2.0:::::::* cpe:2.3:h:tp-link:wr1043nd:2.0:::::::* cpe:2.3:h:tp-link:wr1043nd:3.0:::::::* cpe:2.3:h:tp-link:wr1043nd:4.0:::::::* cpe:2.3:h:tp-link:wr1045nd:2.0:::::::* cpe:2.3:h:tp-link:wr749n:6.0:::::::* cpe:2.3:h:tp-link:wr749n:7.0:::::::* cpe:2.3:h:tp-link:wr802n:1.0:::::::* cpe:2.3:h:tp-link:wr802n:2.0:::::::* cpe:2.3:h:tp-link:wr802n:3.0:::::::* cpe:2.3:h:tp-link:wr841hp:2.0:::::::* cpe:2.3:h:tp-link:wr841hp:3.0:::::::* cpe:2.3:h:tp-link:wr842n:2.0:::::::* cpe:2.3:h:tp-link:wr842n:3.0:::::::* cpe:2.3:h:tp-link:wr842n:4.0:::::::* cpe:2.3:h:tp-link:wr842nd:2.0:::::::* cpe:2.3:h:tp-link:wr842nd:3.0:::::::* cpe:2.3:h:tp-link:wr842nd:4.0:::::::* cpe:2.3:h:tp-link:wr845n:1.0:::::::* cpe:2.3:h:tp-link:wr845n:2.0:::::::* cpe:2.3:h:tp-link:wr941hp:1.0:::::::* cpe:2.3:h:tp-link:wr945n:1.0:::::::* cpe:2.3:o:tp-link:archer_c1900_firmware:::::::: cpe:2.3:o:tp-link:archer_c5_firmware:::::::: cpe:2.3:o:tp-link:archer_c7_firmware:::::::: cpe:2.3:o:tp-link:archer_c7_firmware:3_150508:::::::* cpe:2.3:o:tp-link:mr3420_firmware:-:::::::* cpe:2.3:o:tp-link:mr6400_firmware:-:::::::* cpe:2.3:o:tp-link:tl-mr3020_firmware:-:::::::* cpe:2.3:o:tp-link:tl-mr3220_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wdr3600_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wdr4300_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr710n_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr740n_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr741nd_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr743nd_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr810n_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr840n_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr841n_firmware:::::::: cpe:2.3:o:tp-link:tl-wr841nd_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr843n_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_160905:::::::* cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_170628:::::::* cpe:2.3:o:tp-link:tl-wr940n_firmware:::::::: cpe:2.3:o:tp-link:tl-wr940n_firmware:-:::::::* cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_170704:::::::* cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_171115:::::::* cpe:2.3:o:tp-link:tl-wr941nd_firmware:::::::: cpe:2.3:o:tp-link:tl-wr941nd_firmware:-:::::::* cpe:2.3:o:tp-link:wa701nd_firmware:-:::::::* cpe:2.3:o:tp-link:wa801nd_firmware:-:::::::* cpe:2.3:o:tp-link:wa901nd_firmware:::::::: cpe:2.3:o:tp-link:wa901nd_firmware:-:::::::* cpe:2.3:o:tp-link:wa901nd_firmware:5_160929:::::::* cpe:2.3:o:tp-link:wdr3500_firmware:-:::::::* cpe:2.3:o:tp-link:wr1043nd_firmware:-:::::::* cpe:2.3:o:tp-link:wr1045nd_firmware:-:::::::* cpe:2.3:o:tp-link:wr749n_firmware:-:::::::* cpe:2.3:o:tp-link:wr802n_firmware:-:::::::* cpe:2.3:o:tp-link:wr841hp_firmware:-:::::::* cpe:2.3:o:tp-link:wr842n_firmware:-:::::::* cpe:2.3:o:tp-link:wr842nd_firmware:-:::::::* cpe:2.3:o:tp-link:wr845n_firmware:-:::::::* cpe:2.3:o:tp-link:wr941hp_firmware:::::::: cpe:2.3:o:tp-link:wr945n_firmware:-:::::::*
Vendors & Products		Tp-link archer C1900 Tp-link archer C1900 Firmware Tp-link archer C5 Tp-link archer C5 Firmware Tp-link archer C7 Tp-link archer C7 Firmware Tp-link mr3420 Tp-link mr3420 Firmware Tp-link mr6400 Tp-link mr6400 Firmware Tp-link tl-mr3020 Tp-link tl-mr3020 Firmware Tp-link tl-mr3220 Tp-link tl-mr3220 Firmware Tp-link tl-wdr3600 Tp-link tl-wdr3600 Firmware Tp-link tl-wdr4300 Tp-link tl-wdr4300 Firmware Tp-link tl-wr710n Tp-link tl-wr710n Firmware Tp-link tl-wr740n Tp-link tl-wr740n Firmware Tp-link tl-wr741nd Tp-link tl-wr741nd Firmware Tp-link tl-wr743nd Tp-link tl-wr743nd Firmware Tp-link tl-wr810n Tp-link tl-wr810n Firmware Tp-link tl-wr840n Tp-link tl-wr840n Firmware Tp-link tl-wr841nd Tp-link tl-wr841nd Firmware Tp-link tl-wr843n Tp-link tl-wr843n Firmware Tp-link tl-wr902ac Tp-link tl-wr902ac Firmware Tp-link tl-wr940n Tp-link tl-wr940n Firmware Tp-link tl-wr940n Plus Tp-link tl-wr940n Plus Firmware Tp-link tl-wr941nd Tp-link tl-wr941nd Firmware Tp-link wa701nd Tp-link wa701nd Firmware Tp-link wa801nd Tp-link wa801nd Firmware Tp-link wa901nd Tp-link wa901nd Firmware Tp-link wdr3500 Tp-link wdr3500 Firmware Tp-link wr1043nd Tp-link wr1043nd Firmware Tp-link wr1045nd Tp-link wr1045nd Firmware Tp-link wr749n Tp-link wr749n Firmware Tp-link wr802n Tp-link wr802n Firmware Tp-link wr841hp Tp-link wr841hp Firmware Tp-link wr842n Tp-link wr842n Firmware Tp-link wr842nd Tp-link wr842nd Firmware Tp-link wr845n Tp-link wr845n Firmware Tp-link wr941hp Tp-link wr941hp Firmware Tp-link wr945n Tp-link wr945n Firmware

Wed, 02 Sep 2026 18:30:00 +0000

Type	Values Removed	Values Added
Metrics	cvssV3_0 `{'score': 6.5, 'vector': 'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}`

Wed, 02 Sep 2026 18:00:00 +0000

Type	Values Removed	Values Added
Description	TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. . Was ZDI-CAN-19899.	TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
References		https://www.tp-link.com/us/support/faq/5058/
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}`

Wed, 22 Oct 2025 00:15:00 +0000

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 21 Oct 2025 23:30:00 +0000

Type	Values Removed	Values Added
References		https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224

Tue, 21 Oct 2025 20:30:00 +0000

Type	Values Removed	Values Added
References	https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224

Tue, 21 Oct 2025 19:30:00 +0000

Type	Values Removed	Values Added
References		https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224

Wed, 03 Sep 2025 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		kev `{'dateAdded': '2025-09-03T00:00:00+00:00', 'dueDate': '2025-09-24T00:00:00+00:00'}`

Thu, 07 Aug 2025 16:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Tp-link tl-wr841n
CPEs		cpe:2.3:h:tp-link:tl-wr841n:12:::::::* cpe:2.3:o:tp-link:tl-wr841n_firmware:3.16.9:build_200409::::::
Vendors & Products		Tp-link tl-wr841n

Thu, 19 Sep 2024 08:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Tp-link Tp-link tl-wr841n Firmware
CPEs		cpe:2.3:o:tp-link:tl-wr841n_firmware:-:::::::*
Vendors & Products		Tp-link Tp-link tl-wr841n Firmware
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 18 Sep 2024 18:45:00 +0000

Type	Values Removed	Values Added
Description	TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.	TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. . Was ZDI-CAN-19899.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: zdi

Published: 2024-05-03T02:14:42.922Z

Updated: 2026-09-02T17:58:31.299Z

Reserved: 2023-12-05T16:15:17.543Z

Link: CVE-2023-50224

Vulnrichment

Updated: 2024-08-02T22:09:49.801Z

NVD

Status : Analyzed

Published: 2024-05-03T03:16:10.833

Modified: 2026-09-03T17:28:42.113

Link: CVE-2023-50224

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-290

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation active

Automatable no

Technical Impact partial

Project Subscriptions

Projects

JSON object

JSON object

JSON object

JSON object

JSON object