TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
Summary
| CVE | CVE-2023-50224 |
|---|---|
| State | PUBLISHED |
| Assigner | zdi |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2024-05-03 03:16:10 UTC |
| Updated | 2026-09-03 17:28:42 UTC |
| Description | TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899. |
Risk And Classification
Primary CVSS: v3.1 6.5 MEDIUM from [email protected]
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.155580000 probability, percentile 0.966170000 (date 2026-09-10)
CISA KEV: Listed on 2025-09-03; due 2025-09-24; ransomware use Unknown
Problem Types: CWE-290 | CWE-290 CWE-290: Authentication Bypass by Spoofing
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 6.5 | MEDIUM | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | CNA | CVSS | 6.5 | MEDIUM | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
CVSS v3.1 Breakdown
Attack Vector
AdjacentAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
NoneAvailability
NoneCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA Known Exploited Vulnerability
| Vendor | TP-Link |
|---|---|
| Product | TL-WR841N |
| Name | TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability |
| Required Action | Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. |
| Notes | https://www.tp-link.com/us/support/faq/4308/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-50224 |
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Tp-link | Tl-wr841n | 10 | All | All | All |
| Hardware | Tp-link | Tl-wr841n | 11 | All | All | All |
| Hardware | Tp-link | Tl-wr841n | 8.0 | All | All | All |
| Hardware | Tp-link | Tl-wr841n | 9 | All | All | All |
| Operating System | Tp-link | Tl-wr841n Firmware | All | All | All | All |
| Operating System | Tp-link | Tl-wr841n Firmware | - | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | TP-Link | TL-WR841N | affected 3.16.9 build 200409 custom | Not specified |
| CNA | TP-Link | TL-WR841N | affected V8 custom | Not specified |
| CNA | TP-Link | TL-WR841N | affected V9 custom | Not specified |
| CNA | TP-Link | TL-WR841N | affected V10 custom | Not specified |
| CNA | TP-Link | TL-WR841N | affected V11 custom | Not specified |
| CNA | TP-Link | TL-WR841N | unaffected V11_211209 custom | Not specified |
| CNA | TP-Link | TL-WR841N | affected V12 custom | Not specified |
| CNA | TP-Link | TL-WR841N | unaffected V12_230317 custom | Not specified |
| CNA | TP-Link | TL-WR841ND | affected V8 custom | Not specified |
| CNA | TP-Link | TL-WR841ND | affected V9 custom | Not specified |
| CNA | TP-Link | TL-WR841ND | affected V10 custom | Not specified |
| CNA | TP-Link | TL-WR841ND | affected V11 custom | Not specified |
| CNA | TP-Link | TL-WR841ND | unaffected V11_211209 custom | Not specified |
| CNA | TP-Link | TL-WR841ND | affected V12 custom | Not specified |
| CNA | TP-Link | TL-WR841ND | unaffected V12_230317 custom | Not specified |
| CNA | TP-Link | TL-MR6400 | affected V1 custom | Not specified |
| CNA | TP-Link | TL-MR6400 | affected V2 custom | Not specified |
| CNA | TP-Link | Archer C5 | affected V2 custom | Not specified |
| CNA | TP-Link | Archer C7 | affected V2 custom | Not specified |
| CNA | TP-Link | Archer C7 | unaffected V2_241108 custom | Not specified |
| CNA | TP-Link | Archer C7 | affected V3 custom | Not specified |
| CNA | TP-Link | TL-WDR3600 | affected V2 custom | Not specified |
| CNA | TP-Link | TL-WDR4300 | affected V1 custom | Not specified |
| CNA | TP-Link | TL-WDR3500 | affected V2 custom | Not specified |
| CNA | TP-Link | TL-WR740N | affected V4 custom | Not specified |
| CNA | TP-Link | TL-WR740N | affected V5 custom | Not specified |
| CNA | TP-Link | TL-WR740N | affected V6 custom | Not specified |
| CNA | TP-Link | TL-WR740N | affected V7 custom | Not specified |
| CNA | TP-Link | TL-WR741ND | affected V4 custom | Not specified |
| CNA | TP-Link | TL-WR741ND | affected V5 custom | Not specified |
| CNA | TP-Link | TL-WR741ND | affected V6 custom | Not specified |
| CNA | TP-Link | TL-WR749N | affected BR 6.0 custom | Not specified |
| CNA | TP-Link | TL-WR749N | affected BR 7.0 custom | Not specified |
| CNA | TP-Link | TL-MR3420 | affected V2 custom | Not specified |
| CNA | TP-Link | TL-MR3420 | affected V3 custom | Not specified |
| CNA | TP-Link | TL-MR3420 | affected V4 custom | Not specified |
| CNA | TP-Link | TL-WR1043ND | affected V2 custom | Not specified |
| CNA | TP-Link | TL-WR1043ND | affected V3 custom | Not specified |
| CNA | TP-Link | TL-WR1043ND | affected V4 custom | Not specified |
| CNA | TP-Link | TL-WR1045ND | affected RU V2 custom | Not specified |
| CNA | TP-Link | TL-WR840N | affected V2 custom | Not specified |
| CNA | TP-Link | TL-WR840N | affected V3 custom | Not specified |
| CNA | TP-Link | TL-WR842N | affected V2 custom | Not specified |
| CNA | TP-Link | TL-WR842N | affected V3 custom | Not specified |
| CNA | TP-Link | TL-WR842N | affected V4 custom | Not specified |
| CNA | TP-Link | TL-WR842ND | affected V2 custom | Not specified |
| CNA | TP-Link | TL-WR842ND | affected V3 custom | Not specified |
| CNA | TP-Link | TL-WR842ND | affected V4 custom | Not specified |
| CNA | TP-Link | TL-WR845N | affected V1 custom | Not specified |
| CNA | TP-Link | TL-WR845N | affected V2 custom | Not specified |
| CNA | TP-Link | TL-WR941ND | affected V5 custom | Not specified |
| CNA | TP-Link | TL-WR941ND | affected V6 custom | Not specified |
| CNA | TP-Link | TL-WR941ND | unaffected V6_220610 custom | Not specified |
| CNA | TP-Link | TL-WR945N | affected V1 custom | Not specified |
| CNA | TP-Link | TL-WA801ND | affected V3 custom | Not specified |
| CNA | TP-Link | TL-WA801ND | affected V4 custom | Not specified |
| CNA | TP-Link | TL-WA901ND | affected V3 custom | Not specified |
| CNA | TP-Link | TL-WA901ND | affected V4 custom | Not specified |
| CNA | TP-Link | TL-WA901ND | unaffected V4_201030 custom | Not specified |
| CNA | TP-Link | TL-WA901ND | affected V5 custom | Not specified |
| CNA | TP-Link | TL-WA901ND | unaffected V5_201030 custom | Not specified |
| ADP | Tp-link | Tl-wr841n Firmware | affected 12.0 custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.zerodayinitiative.com/advisories/ZDI-23-1808 | af854a3a-2127-422b-91ae-364da2661108 | www.zerodayinitiative.com | Third Party Advisory |
| www.cisa.gov/known-exploited-vulnerabilities-catalog | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | www.cisa.gov | US Government Resource |
| www.tp-link.com/en/support/download/tl-wr841n/v12 | af854a3a-2127-422b-91ae-364da2661108 | www.tp-link.com | Product |
| www.tp-link.com/us/support/faq/5058 | [email protected] | www.tp-link.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
| CISA Known Exploited Vulnerabilities catalog | CISA | www.cisa.gov | kev |
No vendor comments have been submitted for this CVE.
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| ADP | 2025-09-03T00:00:00.000Z | CVE-2023-50224 added to CISA KEV |
There are currently no legacy QID mappings associated with this CVE.