Skip to main content
Apexward Pulse

TP-Link · Auth bypass

TP-Link TL-WR841N Authentication Bypass Vulnerability

CVE-2023-50224

What this means

This is rated medium severity (6.5 out of 10). It is on the known-exploited catalogue, which means attacks using it have already been seen. Ask IT whether Tp Link Tl wr841n Firmware, Tp Link Tl wr841n and Tp Link mr6400 Firmware, and 21 more are in your estate.

Full vendor description

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

Scoring and exploitation

6.5/ 10
CVSS 3.1 base scoreMedium

Exploitable from the same local network without any account, and no one has to click or open anything. High impact on confidentiality.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability

Longer bar: easier to attack

Attack vectorAdjacentAV:A
Attack complexityLowAC:L
Privileges requiredNonePR:N
User interactionNoneUI:N
ScopeUnchangedS:U

Impact

Longer bar: more harm

ConfidentialityHighC:H
IntegrityNoneI:N
AvailabilityNoneA:N
Elevated attack likelihood (~20% in 30 days)Model estimate (): a probability signal, not confirmed exploitation
Exploited in the wild
Yes — confirmed exploitation (US CISA )
Not reported
Listed product
TP-Link TL-WR841N

Weaknesses

CWE-290

Affected products ()

  • Tp Link Tl wr841n Firmware
  • Tp Link Tl wr841n
  • Tp Link mr6400 Firmware
  • Tp Link mr6400
  • Tp Link Tl wdr3600 Firmware
  • Tp Link Tl wdr3600
  • Tp Link Tl wdr4300 Firmware
  • Tp Link Tl wdr4300
  • Tp Link wdr3500 Firmware
  • Tp Link wdr3500
  • Tp Link Tl wr710n Firmware
  • Tp Link Tl wr710n
  • Tp Link Tl wr740n Firmware
  • Tp Link Tl wr740n
  • Tp Link Tl wr741nd Firmware
  • Tp Link Tl wr741nd
  • Tp Link Tl wr743nd Firmware
  • Tp Link Tl wr743nd
  • Tp Link wr749n Firmware
  • Tp Link wr749n
  • Tp Link mr3420 Firmware
  • Tp Link mr3420
  • Tp Link wr1043nd Firmware
  • Tp Link wr1043nd
Show the raw CPE strings (40)
  • cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr841n:8.0:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr841n:9:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr841n:10:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr841n:11:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr841n:12:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:mr6400_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:mr6400:1.0:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:mr6400:2.0:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:tl-wdr3600_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wdr3600:2.0:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:tl-wdr4300_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wdr4300:1:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:wdr3500_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:wdr3500:2.0:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:tl-wr710n_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr710n:1.0:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr710n:2.0:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:tl-wr740n_firmware:-:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr740n:4.0:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr740n:5.0:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr740n:6.0:*:*:*:*:*:*:*
  • cpe:2.3:h:tp-link:tl-wr740n:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:tp-link:tl-wr741nd_firmware:-:*:*:*:*:*:*:*

Showing 25 of 40 matches from .

References

6 links from the CVE record, grouped by site; the vendor's advisory comes first.

Related feed events