Back to CVE records
Medium 6.5Known exploited (CISA KEV)Published May 3, 2024
CVE-2023-50224TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
Updated under an hour ago ()
Does this affect you?
It affects TP-Link TL-WR841N and 57 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Sep 3, 2025; federal agencies had to remediate by Sep 24, 2025. Treat that date as your deadline.
Do this next
Start free and add your stack
Free account, 1 product
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
- CVSS
- 6.5 MEDIUM (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weakness (CWE)
- CWE-290
- Known exploited
- Added to CISA KEV Sep 3, 2025; federal remediation due Sep 24, 2025Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- EPSS (exploitation in the next 30 days)
- 20.02% (percentile 97)
- Assigned by
- zdi
- NVD analysis
- Analyzed
- Record last updated
- Sep 2, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
TP-Link TL-WR841N tp_link:tl_wr841n (from the name) | 3.16.9 build 200409; V8; V9; V10; V11; V11_211209 not affected; V12; V12_230317 not affected | CNA record |
TP-Link TL-WR841ND tp_link:tl_wr841nd (from the name) | V8; V9; V10; V11; V11_211209 not affected; V12; V12_230317 not affected | CNA record |
TP-Link TL-MR6400 tp_link:tl_mr6400 (from the name) | V1; V2 | CNA record |
TP-Link Archer C5 tp_link:archer_c5 (from the name) | V2 | CNA record |
TP-Link Archer C7 tp_link:archer_c7 (from the name) | V2; V2_241108 not affected; V3 | CNA record |
TP-Link TL-WDR3600 tp_link:tl_wdr3600 (from the name) | V2 | CNA record |
TP-Link TL-WDR4300 tp_link:tl_wdr4300 (from the name) | V1 | CNA record |
TP-Link TL-WDR3500 tp_link:tl_wdr3500 (from the name) | V2 | CNA record |
TP-Link TL-WR740N tp_link:tl_wr740n (from the name) | V4; V5; V6; V7 | CNA record |
TP-Link TL-WR741ND tp_link:tl_wr741nd (from the name) | V4; V5; V6 | CNA record |
TP-Link TL-WR749N tp_link:tl_wr749n (from the name) | BR 6.0; BR 7.0 | CNA record |
TP-Link TL-MR3420 tp_link:tl_mr3420 (from the name) | V2; V3; V4 | CNA record |
TP-Link TL-WR1043ND tp_link:tl_wr1043nd (from the name) | V2; V3; V4 | CNA record |
TP-Link TL-WR1045ND tp_link:tl_wr1045nd (from the name) | RU V2 | CNA record |
TP-Link TL-WR840N tp_link:tl_wr840n (from the name) | V2; V3 | CNA record |
TP-Link TL-WR842N tp_link:tl_wr842n (from the name) | V2; V3; V4 | CNA record |
TP-Link TL-WR842ND tp_link:tl_wr842nd (from the name) | V2; V3; V4 | CNA record |
TP-Link TL-WR845N tp_link:tl_wr845n (from the name) | V1; V2 | CNA record |
TP-Link TL-WR941ND tp_link:tl_wr941nd (from the name) | V5; V6; V6_220610 not affected | CNA record |
TP-Link TL-WR945N tp_link:tl_wr945n (from the name) | V1 | CNA record |
TP-Link TL-WA801ND tp_link:tl_wa801nd (from the name) | V3; V4 | CNA record |
TP-Link TL-WA901ND tp_link:tl_wa901nd (from the name) | V3; V4; V4_201030 not affected; V5; V5_201030 not affected | CNA record |
tp-link tl-wr841n_firmware tp-link:tl-wr841n_firmware | before 12.0 | CISA ADP |
tp-link tl-wr841n_firmware tp-link:tl-wr841n_firmware | all versions; from 11_150616 before 11_211209; from 12_160624 before 12_230317 | NVD |
tp-link mr6400_firmware tp-link:mr6400_firmware | all versions | NVD |
tp-link tl-wdr3600_firmware tp-link:tl-wdr3600_firmware | all versions | NVD |
tp-link tl-wdr4300_firmware tp-link:tl-wdr4300_firmware | all versions | NVD |
tp-link wdr3500_firmware tp-link:wdr3500_firmware | all versions | NVD |
tp-link tl-wr710n_firmware tp-link:tl-wr710n_firmware | all versions | NVD |
tp-link tl-wr740n_firmware tp-link:tl-wr740n_firmware | all versions | NVD |
tp-link tl-wr741nd_firmware tp-link:tl-wr741nd_firmware | all versions | NVD |
tp-link tl-wr743nd_firmware tp-link:tl-wr743nd_firmware | all versions | NVD |
tp-link wr749n_firmware tp-link:wr749n_firmware | all versions | NVD |
tp-link mr3420_firmware tp-link:mr3420_firmware | all versions; all versions | NVD |
tp-link wr1043nd_firmware tp-link:wr1043nd_firmware | all versions | NVD |
tp-link wr1045nd_firmware tp-link:wr1045nd_firmware | all versions | NVD |
tp-link wr802n_firmware tp-link:wr802n_firmware | all versions | NVD |
tp-link tl-wr810n_firmware tp-link:tl-wr810n_firmware | all versions | NVD |
tp-link tl-wr840n_firmware tp-link:tl-wr840n_firmware | all versions | NVD |
tp-link wr841hp_firmware tp-link:wr841hp_firmware | all versions | NVD |
tp-link tl-wr841nd_firmware tp-link:tl-wr841nd_firmware | all versions | NVD |
tp-link wr842n_firmware tp-link:wr842n_firmware | all versions | NVD |
tp-link wr842nd_firmware tp-link:wr842nd_firmware | all versions | NVD |
tp-link tl-wr843n_firmware tp-link:tl-wr843n_firmware | all versions | NVD |
tp-link wr845n_firmware tp-link:wr845n_firmware | all versions | NVD |
tp-link wr945n_firmware tp-link:wr945n_firmware | all versions | NVD |
tp-link tl-mr3020_firmware tp-link:tl-mr3020_firmware | all versions | NVD |
tp-link tl-mr3220_firmware tp-link:tl-mr3220_firmware | all versions | NVD |
tp-link wa701nd_firmware tp-link:wa701nd_firmware | all versions | NVD |
tp-link wa801nd_firmware tp-link:wa801nd_firmware | all versions | NVD |
tp-link archer_c5_firmware tp-link:archer_c5_firmware | from 2_150130 before 2_260429 | NVD |
tp-link archer_c7_firmware tp-link:archer_c7_firmware | from 2_131217 before 2_241108; 3_150508 | NVD |
tp-link archer_c1900_firmware tp-link:archer_c1900_firmware | before 1_260428 | NVD |
tp-link tl-wr902ac_firmware tp-link:tl-wr902ac_firmware | 1_160905; 1_170628 | NVD |
tp-link tl-wr940n_firmware tp-link:tl-wr940n_firmware | all versions; from 5_161019 through 5_220801; from 6_170325 before 6_250925 | NVD |
tp-link tl-wr940n_plus_firmware tp-link:tl-wr940n_plus_firmware | 6_170704; 6_171115 | NVD |
tp-link wr941hp_firmware tp-link:wr941hp_firmware | before 1_211210 | NVD |
tp-link tl-wr941nd_firmware tp-link:tl-wr941nd_firmware | all versions; from 6_150206 before 6_220610 | NVD |
tp-link wa901nd_firmware tp-link:wa901nd_firmware | all versions; 5_160929; from 6_191127 before 6_220701; from 4_151029 before 4_201030 | NVD |
References
- https://www.zerodayinitiative.com/advisories/ZDI-23-1808/x-research-advisory, third-party-advisory
- https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmwarevendor-advisory, product
- https://www.tp-link.com/us/support/faq/5058/vendor-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.