6.5

CVE-2023-50224

Warnung
Medienbericht

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tp-link ≫ Tl-wr841n Firmware Version -
   Tp-link ≫ Tl-wr841n Version 8.0
   Tp-link ≫ Tl-wr841n Version 9
   Tp-link ≫ Tl-wr841n Version 10
Tp-link ≫ Tl-wr841n Firmware Version >= 11_150616 < 11_211209
   Tp-link ≫ Tl-wr841n Version 11
Tp-link ≫ Tl-wr841n Firmware Version >= 12_160624 < 12_230317
   Tp-link ≫ Tl-wr841n Version 12
Tp-link ≫ Mr6400 Firmware Version -
   Tp-link ≫ Mr6400 Version 1.0
   Tp-link ≫ Mr6400 Version 2.0
Tp-link ≫ Tl-wdr3600 Firmware Version -
   Tp-link ≫ Tl-wdr3600 Version 2.0
Tp-link ≫ Tl-wdr4300 Firmware Version -
   Tp-link ≫ Tl-wdr4300 Version 1
Tp-link ≫ Wdr3500 Firmware Version -
   Tp-link ≫ Wdr3500 Version 2.0
Tp-link ≫ Tl-wr710n Firmware Version -
   Tp-link ≫ Tl-wr710n Version 1.0
   Tp-link ≫ Tl-wr710n Version 2.0
Tp-link ≫ Tl-wr740n Firmware Version -
   Tp-link ≫ Tl-wr740n Version 4.0
   Tp-link ≫ Tl-wr740n Version 5.0
   Tp-link ≫ Tl-wr740n Version 6.0
   Tp-link ≫ Tl-wr740n Version 7.0
Tp-link ≫ Tl-wr741nd Firmware Version -
   Tp-link ≫ Tl-wr741nd Version 2.0
   Tp-link ≫ Tl-wr741nd Version 4.0
   Tp-link ≫ Tl-wr741nd Version 5
   Tp-link ≫ Tl-wr741nd Version 6.0
Tp-link ≫ Tl-wr743nd Firmware Version -
   Tp-link ≫ Tl-wr743nd Version 2.0
Tp-link ≫ Wr749n Firmware Version -
   Tp-link ≫ Wr749n Version 6.0
   Tp-link ≫ Wr749n Version 7.0
Tp-link ≫ Mr3420 Firmware Version -
   Tp-link ≫ Mr3420 Version 2.0
   Tp-link ≫ Mr3420 Version 3.0
   Tp-link ≫ Mr3420 Version 4.0
Tp-link ≫ Wr1043nd Firmware Version -
   Tp-link ≫ Wr1043nd Version 2.0
   Tp-link ≫ Wr1043nd Version 3.0
   Tp-link ≫ Wr1043nd Version 4.0
Tp-link ≫ Wr1045nd Firmware Version -
   Tp-link ≫ Wr1045nd Version 2.0
Tp-link ≫ Wr802n Firmware Version -
   Tp-link ≫ Wr802n Version 1.0
   Tp-link ≫ Wr802n Version 2.0
   Tp-link ≫ Wr802n Version 3.0
Tp-link ≫ Tl-wr810n Firmware Version -
   Tp-link ≫ Tl-wr810n Version 1.0
   Tp-link ≫ Tl-wr810n Version 2.0
Tp-link ≫ Tl-wr840n Firmware Version -
   Tp-link ≫ Tl-wr840n Version 2.0
   Tp-link ≫ Tl-wr840n Version 3.0
Tp-link ≫ Wr841hp Firmware Version -
   Tp-link ≫ Wr841hp Version 2.0
   Tp-link ≫ Wr841hp Version 3.0
Tp-link ≫ Tl-wr841nd Firmware Version -
   Tp-link ≫ Tl-wr841nd Version 11.0
Tp-link ≫ Wr842n Firmware Version -
   Tp-link ≫ Wr842n Version 2.0
   Tp-link ≫ Wr842n Version 3.0
   Tp-link ≫ Wr842n Version 4.0
Tp-link ≫ Wr842nd Firmware Version -
   Tp-link ≫ Wr842nd Version 2.0
   Tp-link ≫ Wr842nd Version 3.0
   Tp-link ≫ Wr842nd Version 4.0
Tp-link ≫ Tl-wr843n Firmware Version -
   Tp-link ≫ Tl-wr843n Version 2.0
   Tp-link ≫ Tl-wr843n Version 3.0
Tp-link ≫ Wr845n Firmware Version -
   Tp-link ≫ Wr845n Version 1.0
   Tp-link ≫ Wr845n Version 2.0
Tp-link ≫ Wr945n Firmware Version -
   Tp-link ≫ Wr945n Version 1.0
Tp-link ≫ Tl-mr3020 Firmware Version -
   Tp-link ≫ Tl-mr3020 Version 1.0
Tp-link ≫ Tl-mr3220 Firmware Version -
   Tp-link ≫ Tl-mr3220 Version 2.0
Tp-link ≫ Mr3420 Firmware Version -
   Tp-link ≫ Mr3420 Version 2.0
   Tp-link ≫ Mr3420 Version 3.0
Tp-link ≫ Wa701nd Firmware Version -
   Tp-link ≫ Wa701nd Version 2.0
Tp-link ≫ Wa801nd Firmware Version -
   Tp-link ≫ Wa801nd Version 3.0
   Tp-link ≫ Wa801nd Version 4.0
Tp-link ≫ Archer C5 Firmware Version >= 2_150130 < 2_260429
   Tp-link ≫ Archer C5 Version 2.0
Tp-link ≫ Archer C7 Firmware Version >= 2_131217 < 2_241108
   Tp-link ≫ Archer C7 Version 2.0
Tp-link ≫ Archer C7 Firmware Version 3_150508
   Tp-link ≫ Archer C7 Version 3.0
Tp-link ≫ Archer C1900 Firmware Version < 1_260428
   Tp-link ≫ Archer C1900 Version 1.0
Tp-link ≫ Tl-wr902ac Firmware Version 1_160905
   Tp-link ≫ Tl-wr902ac Version 1
Tp-link ≫ Tl-wr902ac Firmware Version 1_170628
   Tp-link ≫ Tl-wr902ac Version 1
Tp-link ≫ Tl-wr940n Firmware Version -
   Tp-link ≫ Tl-wr940n Version 2.0
   Tp-link ≫ Tl-wr940n Version 4.0
   Tp-link ≫ Tl-wr940n Version v3
Tp-link ≫ Tl-wr940n Firmware Version >= 5_161019 <= 5_220801
   Tp-link ≫ Tl-wr940n Version 5.0
Tp-link ≫ Tl-wr940n Firmware Version >= 6_170325 < 6_250925
   Tp-link ≫ Tl-wr940n Version v6
Tp-link ≫ Tl-wr940n Plus Firmware Version 6_170704
   Tp-link ≫ Tl-wr940n Plus Version 6.0
Tp-link ≫ Tl-wr940n Plus Firmware Version 6_171115
   Tp-link ≫ Tl-wr940n Plus Version 6.0
Tp-link ≫ Wr941hp Firmware Version < 1_211210
   Tp-link ≫ Wr941hp Version 1.0
Tp-link ≫ Tl-wr941nd Firmware Version -
   Tp-link ≫ Tl-wr941nd Version v5
Tp-link ≫ Tl-wr941nd Firmware Version >= 6_150206 < 6_220610
   Tp-link ≫ Tl-wr941nd Version v6
Tp-link ≫ Wa901nd Firmware Version -
   Tp-link ≫ Wa901nd Version 3.0
Tp-link ≫ Wa901nd Firmware Version 5_160929
   Tp-link ≫ Wa901nd Version 5.0
Tp-link ≫ Wa901nd Firmware Version >= 6_191127 < 6_220701
   Tp-link ≫ Wa901nd Version 6.0
Tp-link ≫ Wa901nd Firmware Version >= 4_151029 < 4_201030
   Tp-link ≫ Wa901nd Version 4.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login

03.09.2025: CISA Known Exploited Vulnerabilities (KEV) Catalog

TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

Schwachstelle

TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Beschreibung

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 17.45% 0.967
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Trend Micro 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-290 Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
10.04.2026 15:19
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
09.04.2026 17:04
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
25.03.2026 12:38
https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware
Product
https://www.tp-link.com/us/support/faq/5058/
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-23-1808/
Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224
US Government Resource