AEGLIX vulnerability intelligence
CVE-2023-50224
MEDIUM · CVSS 6.5 · Analyzed
Published: 2024-05-03 · Updated: 2026-09-03 · Source: NVD
Vulnerability overview
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
Severity and scoring
- CVSS score
- 6.5 · MEDIUM
- CVSS version
- 3.1
- CVSS vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-290
CVSS measures technical severity; it does not establish whether this vulnerability is being exploited in your environment.
Known exploitation and remediation
Listed in CISA’s Known Exploited Vulnerabilities catalog.
- Affected product
- TP-Link · TL-WR841N
- Added to catalog
- 2025-09-03
- Required action
- Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- CISA remediation due date
- 2025-09-24
CISA deadlines apply to the organizations covered by its directives. Confirm your own remediation requirements.
Verify affected versions and patch availability in the vendor advisory before making changes.
Affected products and versions
cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*
From (inclusive): 11_150616
Before (exclusive): 11_211209
cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*
From (inclusive): 12_160624
Before (exclusive): 12_230317
cpe:2.3:o:tp-link:mr6400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wdr3600_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wdr4300_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wdr3500_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wr710n_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wr740n_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wr741nd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wr743nd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wr749n_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:mr3420_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wr1043nd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wr1045nd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wr802n_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wr810n_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wr840n_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wr841hp_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wr841nd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wr842n_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wr842nd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wr843n_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wr845n_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wr945n_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-mr3020_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-mr3220_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:mr3420_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wa701nd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wa801nd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:archer_c5_firmware:*:*:*:*:*:*:*:*
From (inclusive): 2_150130
Before (exclusive): 2_260429
cpe:2.3:o:tp-link:archer_c7_firmware:*:*:*:*:*:*:*:*
From (inclusive): 2_131217
Before (exclusive): 2_241108
cpe:2.3:o:tp-link:archer_c7_firmware:3_150508:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:archer_c1900_firmware:*:*:*:*:*:*:*:*
Before (exclusive): 1_260428
cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_160905:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_170628:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wr940n_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wr940n_firmware:*:*:*:*:*:*:*:*
From (inclusive): 5_161019
Through (inclusive): 5_220801
cpe:2.3:o:tp-link:tl-wr940n_firmware:*:*:*:*:*:*:*:*
From (inclusive): 6_170325
Before (exclusive): 6_250925
cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_170704:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_171115:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wr941hp_firmware:*:*:*:*:*:*:*:*
Before (exclusive): 1_211210
cpe:2.3:o:tp-link:tl-wr941nd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:tl-wr941nd_firmware:*:*:*:*:*:*:*:*
From (inclusive): 6_150206
Before (exclusive): 6_220610
cpe:2.3:o:tp-link:wa901nd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wa901nd_firmware:5_160929:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wa901nd_firmware:*:*:*:*:*:*:*:*
From (inclusive): 6_191127
Before (exclusive): 6_220701
cpe:2.3:o:tp-link:wa901nd_firmware:*:*:*:*:*:*:*:*
From (inclusive): 4_151029
Before (exclusive): 4_201030
These are NVD CPE applicability entries. Some products depend on configuration conditions; consult the official record to confirm applicability.
Advisories and references
- https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware
Product
- https://www.tp-link.com/us/support/faq/5058/
Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-23-1808/
Third Party Advisory
- https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware
Product
- https://www.zerodayinitiative.com/advisories/ZDI-23-1808/
Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224
US Government Resource