Read the docs
TI-2023-27456 Aliases CVE-2023-50224GHSA-g654-hw9f-49w6

Authentication bypass by spoofing in TP-Link TL-WR841N

Priority CRITICAL 86Exploited in the wildCWE-290Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-290.

Summary

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

Why it matters now

Exploitation Active In CISA KEV since 2025-09-03CISA due date 2025-09-24
EPSS 0.20021 97th percentileScored 2026-11-07
Fix Fixed TL-WR841N (TP-Link): V11_211209, V12_230317TL-WR841ND (TP-Link): V11_211209, V12_230317+3 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TP-LinkTL-WR841N3.16.9 build 200409 and later; V8 and later; V9 and later; V10 and later; V11 and later; V12 and laterV11_211209, V12_230317Patch availableCNA
TP-LinkTL-WR841NDV8 and later; V9 and later; V10 and later; V11 and later; V12 and laterV11_211209, V12_230317Patch availableCNA
TP-LinkTL-MR6400V1 and later; V2 and later—No fix listedCNA
TP-LinkArcher C5V2 and later—No fix listedCNA
TP-LinkArcher C7V2 and later; V3 and laterV2_241108Patch availableCNA
TP-LinkTL-WDR3600V2 and later—No fix listedCNA
TP-LinkTL-WDR4300V1 and later—No fix listedCNA
TP-LinkTL-WDR3500V2 and later—No fix listedCNA
TP-LinkTL-WR740NV4 and later; V5 and later; V6 and later; V7 and later—No fix listedCNA
TP-LinkTL-WR741NDV4 and later; V5 and later; V6 and later—No fix listedCNA
TP-LinkTL-WR749NBR 6.0 and later; BR 7.0 and later—No fix listedCNA
TP-LinkTL-MR3420V2 and later; V3 and later; V4 and later—No fix listedCNA
TP-LinkTL-WR1043NDV2 and later; V3 and later; V4 and later—No fix listedCNA
TP-LinkTL-WR1045NDRU V2 and later—No fix listedCNA
TP-LinkTL-WR840NV2 and later; V3 and later—No fix listedCNA
TP-LinkTL-WR842NV2 and later; V3 and later; V4 and later—No fix listedCNA
TP-LinkTL-WR842NDV2 and later; V3 and later; V4 and later—No fix listedCNA
TP-LinkTL-WR845NV1 and later; V2 and later—No fix listedCNA
TP-LinkTL-WR941NDV5 and later; V6 and laterV6_220610Patch availableCNA
TP-LinkTL-WR945NV1 and later—No fix listedCNA
TP-LinkTL-WA801NDV3 and later; V4 and later—No fix listedCNA
TP-LinkTL-WA901NDV3 and later; V4 and later; V5 and laterV4_201030, V5_201030Patch availableCNA
  • TL-WR841N VendorTP-Link Affected 3.16.9 build 200409 and later; V8 and later; V9 and later; V10 and later; V11 and later; V12 and later Fixed in V11_211209, V12_230317 Patch available CNA
  • TL-WR841ND VendorTP-Link Affected V8 and later; V9 and later; V10 and later; V11 and later; V12 and later Fixed in V11_211209, V12_230317 Patch available CNA
  • TL-MR6400 VendorTP-Link Affected V1 and later; V2 and later Fixed in — No fix listed CNA
  • Archer C5 VendorTP-Link Affected V2 and later Fixed in — No fix listed CNA
  • Archer C7 VendorTP-Link Affected V2 and later; V3 and later Fixed in V2_241108 Patch available CNA
  • TL-WDR3600 VendorTP-Link Affected V2 and later Fixed in — No fix listed CNA
  • TL-WDR4300 VendorTP-Link Affected V1 and later Fixed in — No fix listed CNA
  • TL-WDR3500 VendorTP-Link Affected V2 and later Fixed in — No fix listed CNA
  • TL-WR740N VendorTP-Link Affected V4 and later; V5 and later; V6 and later; V7 and later Fixed in — No fix listed CNA
  • TL-WR741ND VendorTP-Link Affected V4 and later; V5 and later; V6 and later Fixed in — No fix listed CNA
  • TL-WR749N VendorTP-Link Affected BR 6.0 and later; BR 7.0 and later Fixed in — No fix listed CNA
  • TL-MR3420 VendorTP-Link Affected V2 and later; V3 and later; V4 and later Fixed in — No fix listed CNA
  • TL-WR1043ND VendorTP-Link Affected V2 and later; V3 and later; V4 and later Fixed in — No fix listed CNA
  • TL-WR1045ND VendorTP-Link Affected RU V2 and later Fixed in — No fix listed CNA
  • TL-WR840N VendorTP-Link Affected V2 and later; V3 and later Fixed in — No fix listed CNA
  • TL-WR842N VendorTP-Link Affected V2 and later; V3 and later; V4 and later Fixed in — No fix listed CNA
  • TL-WR842ND VendorTP-Link Affected V2 and later; V3 and later; V4 and later Fixed in — No fix listed CNA
  • TL-WR845N VendorTP-Link Affected V1 and later; V2 and later Fixed in — No fix listed CNA
  • TL-WR941ND VendorTP-Link Affected V5 and later; V6 and later Fixed in V6_220610 Patch available CNA
  • TL-WR945N VendorTP-Link Affected V1 and later Fixed in — No fix listed CNA
  • TL-WA801ND VendorTP-Link Affected V3 and later; V4 and later Fixed in — No fix listed CNA
  • TL-WA901ND VendorTP-Link Affected V3 and later; V4 and later; V5 and later Fixed in V4_201030, V5_201030 Patch available CNA

CPE configurations NVD · 121

CPEVersionsRoleVendor
cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr841n:8.0:*:*:*:*:*:*:*8.0Running onTP-Link
cpe:2.3:h:tp-link:tl-wr841n:9:*:*:*:*:*:*:*9Running onTP-Link
cpe:2.3:h:tp-link:tl-wr841n:10:*:*:*:*:*:*:*10Running onTP-Link
cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*11_150616 to before 11_211209VulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr841n:11:*:*:*:*:*:*:*11Running onTP-Link
cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*12_160624 to before 12_230317VulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr841n:12:*:*:*:*:*:*:*12Running onTP-Link
cpe:2.3:o:tp-link:mr6400_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:mr6400:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
  • cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr841n:8.0:*:*:*:*:*:*:* Versions 8.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr841n:9:*:*:*:*:*:*:* Versions 9 Running on ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr841n:10:*:*:*:*:*:*:* Versions 10 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:* Versions 11_150616 to before 11_211209 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr841n:11:*:*:*:*:*:*:* Versions 11 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:* Versions 12_160624 to before 12_230317 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr841n:12:*:*:*:*:*:*:* Versions 12 Running on ·TP-Link
  • cpe:2.3:o:tp-link:mr6400_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:mr6400:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
Show 111 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:tp-link:mr6400:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:tl-wdr3600_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-wdr3600:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:tl-wdr4300_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-wdr4300:1:*:*:*:*:*:*:*1Running onTP-Link
cpe:2.3:o:tp-link:wdr3500_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:wdr3500:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:tl-wr710n_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr710n:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:h:tp-link:tl-wr710n:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:tl-wr740n_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr740n:4.0:*:*:*:*:*:*:*4.0Running onTP-Link
cpe:2.3:h:tp-link:tl-wr740n:5.0:*:*:*:*:*:*:*5.0Running onTP-Link
cpe:2.3:h:tp-link:tl-wr740n:6.0:*:*:*:*:*:*:*6.0Running onTP-Link
cpe:2.3:h:tp-link:tl-wr740n:7.0:*:*:*:*:*:*:*7.0Running onTP-Link
cpe:2.3:o:tp-link:tl-wr741nd_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr741nd:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:h:tp-link:tl-wr741nd:4.0:*:*:*:*:*:*:*4.0Running onTP-Link
cpe:2.3:h:tp-link:tl-wr741nd:5:*:*:*:*:*:*:*5Running onTP-Link
cpe:2.3:h:tp-link:tl-wr741nd:6.0:*:*:*:*:*:*:*6.0Running onTP-Link
cpe:2.3:o:tp-link:tl-wr743nd_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr743nd:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:wr749n_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:wr749n:6.0:*:*:*:*:*:*:*6.0Running onTP-Link
cpe:2.3:h:tp-link:wr749n:7.0:*:*:*:*:*:*:*7.0Running onTP-Link
cpe:2.3:o:tp-link:mr3420_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:mr3420:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:h:tp-link:mr3420:3.0:*:*:*:*:*:*:*3.0Running onTP-Link
cpe:2.3:h:tp-link:mr3420:4.0:*:*:*:*:*:*:*4.0Running onTP-Link
cpe:2.3:o:tp-link:wr1043nd_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:wr1043nd:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:h:tp-link:wr1043nd:3.0:*:*:*:*:*:*:*3.0Running onTP-Link
cpe:2.3:h:tp-link:wr1043nd:4.0:*:*:*:*:*:*:*4.0Running onTP-Link
cpe:2.3:o:tp-link:wr1045nd_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:wr1045nd:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:wr802n_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:wr802n:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:h:tp-link:wr802n:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:h:tp-link:wr802n:3.0:*:*:*:*:*:*:*3.0Running onTP-Link
cpe:2.3:o:tp-link:tl-wr810n_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr810n:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:h:tp-link:tl-wr810n:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:tl-wr840n_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr840n:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:h:tp-link:tl-wr840n:3.0:*:*:*:*:*:*:*3.0Running onTP-Link
cpe:2.3:o:tp-link:wr841hp_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:wr841hp:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:h:tp-link:wr841hp:3.0:*:*:*:*:*:*:*3.0Running onTP-Link
cpe:2.3:o:tp-link:tl-wr841nd_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr841nd:11.0:*:*:*:*:*:*:*11.0Running onTP-Link
cpe:2.3:o:tp-link:wr842n_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:wr842n:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:h:tp-link:wr842n:3.0:*:*:*:*:*:*:*3.0Running onTP-Link
cpe:2.3:h:tp-link:wr842n:4.0:*:*:*:*:*:*:*4.0Running onTP-Link
cpe:2.3:o:tp-link:wr842nd_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:wr842nd:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:h:tp-link:wr842nd:3.0:*:*:*:*:*:*:*3.0Running onTP-Link
cpe:2.3:h:tp-link:wr842nd:4.0:*:*:*:*:*:*:*4.0Running onTP-Link
cpe:2.3:o:tp-link:tl-wr843n_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr843n:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:h:tp-link:tl-wr843n:3.0:*:*:*:*:*:*:*3.0Running onTP-Link
cpe:2.3:o:tp-link:wr845n_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:wr845n:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:h:tp-link:wr845n:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:wr945n_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:wr945n:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:tl-mr3020_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-mr3020:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:tl-mr3220_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-mr3220:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:wa701nd_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:wa701nd:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:wa801nd_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:wa801nd:3.0:*:*:*:*:*:*:*3.0Running onTP-Link
cpe:2.3:h:tp-link:wa801nd:4.0:*:*:*:*:*:*:*4.0Running onTP-Link
cpe:2.3:o:tp-link:archer_c5_firmware:*:*:*:*:*:*:*:*2_150130 to before 2_260429VulnerableTP-Link
cpe:2.3:h:tp-link:archer_c5:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:archer_c7_firmware:*:*:*:*:*:*:*:*2_131217 to before 2_241108VulnerableTP-Link
cpe:2.3:h:tp-link:archer_c7:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:o:tp-link:archer_c7_firmware:3_150508:*:*:*:*:*:*:*3_150508VulnerableTP-Link
cpe:2.3:h:tp-link:archer_c7:3.0:*:*:*:*:*:*:*3.0Running onTP-Link
cpe:2.3:o:tp-link:archer_c1900_firmware:*:*:*:*:*:*:*:*before 1_260428VulnerableTP-Link
cpe:2.3:h:tp-link:archer_c1900:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_160905:*:*:*:*:*:*:*1_160905VulnerableTP-Link
cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_170628:*:*:*:*:*:*:*1_170628VulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr902ac:1:*:*:*:*:*:*:*1Running onTP-Link
cpe:2.3:o:tp-link:tl-wr940n_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr940n:2.0:*:*:*:*:*:*:*2.0Running onTP-Link
cpe:2.3:h:tp-link:tl-wr940n:4.0:*:*:*:*:*:*:*4.0Running onTP-Link
cpe:2.3:h:tp-link:tl-wr940n:v3:*:*:*:*:*:*:*v3Running onTP-Link
cpe:2.3:o:tp-link:tl-wr940n_firmware:*:*:*:*:*:*:*:*5_161019 – 5_220801VulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr940n:5.0:*:*:*:*:*:*:*5.0Running onTP-Link
cpe:2.3:o:tp-link:tl-wr940n_firmware:*:*:*:*:*:*:*:*6_170325 to before 6_250925VulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr940n:v6:*:*:*:*:*:*:*v6Running onTP-Link
cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_170704:*:*:*:*:*:*:*6_170704VulnerableTP-Link
cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_171115:*:*:*:*:*:*:*6_171115VulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr940n_plus:6.0:*:*:*:*:*:*:*6.0Running onTP-Link
cpe:2.3:o:tp-link:wr941hp_firmware:*:*:*:*:*:*:*:*before 1_211210VulnerableTP-Link
cpe:2.3:h:tp-link:wr941hp:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
cpe:2.3:o:tp-link:tl-wr941nd_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr941nd:v5:*:*:*:*:*:*:*v5Running onTP-Link
cpe:2.3:o:tp-link:tl-wr941nd_firmware:*:*:*:*:*:*:*:*6_150206 to before 6_220610VulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr941nd:v6:*:*:*:*:*:*:*v6Running onTP-Link
cpe:2.3:o:tp-link:wa901nd_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTP-Link
cpe:2.3:h:tp-link:wa901nd:3.0:*:*:*:*:*:*:*3.0Running onTP-Link
cpe:2.3:o:tp-link:wa901nd_firmware:5_160929:*:*:*:*:*:*:*5_160929VulnerableTP-Link
cpe:2.3:h:tp-link:wa901nd:5.0:*:*:*:*:*:*:*5.0Running onTP-Link
cpe:2.3:o:tp-link:wa901nd_firmware:*:*:*:*:*:*:*:*6_191127 to before 6_220701VulnerableTP-Link
cpe:2.3:h:tp-link:wa901nd:6.0:*:*:*:*:*:*:*6.0Running onTP-Link
cpe:2.3:o:tp-link:wa901nd_firmware:*:*:*:*:*:*:*:*4_151029 to before 4_201030VulnerableTP-Link
cpe:2.3:h:tp-link:wa901nd:4.0:*:*:*:*:*:*:*4.0Running onTP-Link
  • cpe:2.3:h:tp-link:mr6400:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wdr3600_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wdr3600:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wdr4300_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wdr4300:1:*:*:*:*:*:*:* Versions 1 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wdr3500_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wdr3500:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr710n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr710n:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr710n:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr740n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr740n:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr740n:5.0:*:*:*:*:*:*:* Versions 5.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr740n:6.0:*:*:*:*:*:*:* Versions 6.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr740n:7.0:*:*:*:*:*:*:* Versions 7.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr741nd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr741nd:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr741nd:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr741nd:5:*:*:*:*:*:*:* Versions 5 Running on ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr741nd:6.0:*:*:*:*:*:*:* Versions 6.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr743nd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr743nd:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wr749n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wr749n:6.0:*:*:*:*:*:*:* Versions 6.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:wr749n:7.0:*:*:*:*:*:*:* Versions 7.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:mr3420_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:mr3420:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:mr3420:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:mr3420:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wr1043nd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wr1043nd:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:wr1043nd:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:wr1043nd:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wr1045nd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wr1045nd:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wr802n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wr802n:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:wr802n:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:wr802n:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr810n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr810n:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr810n:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr840n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr840n:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr840n:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wr841hp_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wr841hp:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:wr841hp:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr841nd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr841nd:11.0:*:*:*:*:*:*:* Versions 11.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wr842n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wr842n:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:wr842n:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:wr842n:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wr842nd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wr842nd:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:wr842nd:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:wr842nd:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr843n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr843n:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr843n:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wr845n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wr845n:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:wr845n:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wr945n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wr945n:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-mr3020_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-mr3020:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-mr3220_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-mr3220:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wa701nd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wa701nd:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wa801nd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wa801nd:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:wa801nd:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:archer_c5_firmware:*:*:*:*:*:*:*:* Versions 2_150130 to before 2_260429 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:archer_c5:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:archer_c7_firmware:*:*:*:*:*:*:*:* Versions 2_131217 to before 2_241108 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:archer_c7:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:archer_c7_firmware:3_150508:*:*:*:*:*:*:* Versions 3_150508 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:archer_c7:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:archer_c1900_firmware:*:*:*:*:*:*:*:* Versions before 1_260428 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:archer_c1900:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_160905:*:*:*:*:*:*:* Versions 1_160905 Vulnerable ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_170628:*:*:*:*:*:*:* Versions 1_170628 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr902ac:1:*:*:*:*:*:*:* Versions 1 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr940n_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr940n:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr940n:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr940n:v3:*:*:*:*:*:*:* Versions v3 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr940n_firmware:*:*:*:*:*:*:*:* Versions 5_161019 – 5_220801 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr940n:5.0:*:*:*:*:*:*:* Versions 5.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr940n_firmware:*:*:*:*:*:*:*:* Versions 6_170325 to before 6_250925 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr940n:v6:*:*:*:*:*:*:* Versions v6 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_170704:*:*:*:*:*:*:* Versions 6_170704 Vulnerable ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_171115:*:*:*:*:*:*:* Versions 6_171115 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr940n_plus:6.0:*:*:*:*:*:*:* Versions 6.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wr941hp_firmware:*:*:*:*:*:*:*:* Versions before 1_211210 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wr941hp:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr941nd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr941nd:v5:*:*:*:*:*:*:* Versions v5 Running on ·TP-Link
  • cpe:2.3:o:tp-link:tl-wr941nd_firmware:*:*:*:*:*:*:*:* Versions 6_150206 to before 6_220610 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr941nd:v6:*:*:*:*:*:*:* Versions v6 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wa901nd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wa901nd:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wa901nd_firmware:5_160929:*:*:*:*:*:*:* Versions 5_160929 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wa901nd:5.0:*:*:*:*:*:*:* Versions 5.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wa901nd_firmware:*:*:*:*:*:*:*:* Versions 6_191127 to before 6_220701 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wa901nd:6.0:*:*:*:*:*:*:* Versions 6.0 Running on ·TP-Link
  • cpe:2.3:o:tp-link:wa901nd_firmware:*:*:*:*:*:*:*:* Versions 4_151029 to before 4_201030 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:wa901nd:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·TP-Link

Remediation

  • Fix · CNA TL-WR841N (TP-Link) Fixed in V11_211209, V12_230317
  • Fix · CNA TL-WR841ND (TP-Link) Fixed in V11_211209, V12_230317
  • Fix · CNA Archer C7 (TP-Link) Fixed in V2_241108
  • Fix · CNA TL-WR941ND (TP-Link) Fixed in V6_220610
  • Fix · CNA TL-WA901ND (TP-Link) Fixed in V4_201030, V5_201030

Timeline

  1. 2025-09-03 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2023-50224
  3. 2026-10-03 Alias added: GHSA-g654-hw9f-49w6

References

Advisory 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences