TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
Medium CVSS 6.5 Listed in CISA KEV
Summary
TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- TP-Link:TL-WR841N
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
Sources
- CISA KEV DATABASE
- NVD DATABASE
Original Links
- https://nvd.nist.gov/vuln/detail/CVE-2023-50224 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog kev
- https://www.tp-link.com/us/support/faq/4308/ reference
- https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware Product
- https://www.tp-link.com/us/support/faq/5058/ Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-23-1808/ Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224 US Government Resource
Timeline
- kev_added CISA KEV
- kev_ingest CISA KEV
- nvd_ingest NVD