CVE-2023-50224

Published: May 3, 2024Modified: Sep 3, 2026CISA KEV

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: zdi-disclosures@trendmicro.com (Secondary)

Description

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

Affected (47)

Products: Tp Link: Tl Wr841n Firmware, Mr6400 Firmware, Tl Wdr3600 Firmware, Tl Wdr4300 Firmware, Wdr3500 Firmware, Tl Wr710n Firmware, Tl Wr740n Firmware, Tl Wr741nd Firmware, Tl Wr743nd Firmware, Wr749n Firmware, Wr1043nd Firmware, Wr1045nd Firmware, Wr802n Firmware, Tl Wr810n Firmware, Tl Wr840n Firmware, Wr841hp Firmware, Tl Wr841nd Firmware, Wr842n Firmware, Wr842nd Firmware, Tl Wr843n Firmware, Wr845n Firmware, Wr945n Firmware, Tl Mr3020 Firmware, Tl Mr3220 Firmware, Mr3420 Firmware, Wa701nd Firmware, Wa801nd Firmware, Archer C5 Firmware, Archer C7 Firmware, Archer C1900 Firmware, Tl Wr902ac Firmware, Tl Wr940n Firmware, Tl Wr940n Plus Firmware, Wr941hp Firmware, Tl Wr941nd Firmware, Wa901nd Firmware

36 products

Archer C1900 Firmware

Tl Wr902ac Firmware

Tl Wr940n Firmware

Tl Wr940n Plus Firmware

Wr941hp Firmware

Tl Wr941nd Firmware

Wa901nd Firmware

Configuration A

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr841n Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Wr841n	Version 10
Tp Link Tl Wr841n	Version 8.0
Tp Link Tl Wr841n	Version 9

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr841n Firmware	From 11_150616 to 11_211209

Running on/with	Platform Versions
Tp Link Tl Wr841n	Version 11

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr841n Firmware	From 12_160624 to 12_230317

Running on/with	Platform Versions
Tp Link Tl Wr841n	Version 12

Configuration D

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Tp Link Mr6400 Firmware	All versions

Running on/with	Platform Versions
Tp Link Mr6400	Version 1.0
Tp Link Mr6400	Version 2.0

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wdr3600 Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Wdr3600	Version 2.0

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wdr4300 Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Wdr4300	Version 1

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wdr3500 Firmware	All versions

Running on/with	Platform Versions
Tp Link Wdr3500	Version 2.0

Configuration H

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr710n Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Wr710n	Version 1.0
Tp Link Tl Wr710n	Version 2.0

Configuration I

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr740n Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Wr740n	Version 4.0
Tp Link Tl Wr740n	Version 5.0
Tp Link Tl Wr740n	Version 6.0
Tp Link Tl Wr740n	Version 7.0

Configuration J

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr741nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Wr741nd	Version 2.0
Tp Link Tl Wr741nd	Version 4.0
Tp Link Tl Wr741nd	Version 5
Tp Link Tl Wr741nd	Version 6.0

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr743nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Wr743nd	Version 2.0

Configuration L

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Tp Link Wr749n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr749n	Version 6.0
Tp Link Wr749n	Version 7.0

Configuration M

1 platform

Running on/with	Platform Versions
Tp Link Mr3420	Version 4.0

Configuration N

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Tp Link Wr1043nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr1043nd	Version 2.0
Tp Link Wr1043nd	Version 3.0
Tp Link Wr1043nd	Version 4.0

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr1045nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr1045nd	Version 2.0

Configuration P

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Tp Link Wr802n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr802n	Version 1.0
Tp Link Wr802n	Version 2.0
Tp Link Wr802n	Version 3.0

Configuration Q

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr810n Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Wr810n	Version 1.0
Tp Link Tl Wr810n	Version 2.0

Configuration R

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr840n Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Wr840n	Version 2.0
Tp Link Tl Wr840n	Version 3.0

Configuration S

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Tp Link Wr841hp Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr841hp	Version 2.0
Tp Link Wr841hp	Version 3.0

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr841nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Wr841nd	Version 11.0

Configuration U

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Tp Link Wr842n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr842n	Version 2.0
Tp Link Wr842n	Version 3.0
Tp Link Wr842n	Version 4.0

Configuration V

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Tp Link Wr842nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr842nd	Version 2.0
Tp Link Wr842nd	Version 3.0
Tp Link Wr842nd	Version 4.0

Configuration W

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr843n Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Wr843n	Version 2.0
Tp Link Tl Wr843n	Version 3.0

Configuration X

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Tp Link Wr845n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr845n	Version 1.0
Tp Link Wr845n	Version 2.0

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr945n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr945n	Version 1.0

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Mr3020 Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Mr3020	Version 1.0

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Mr3220 Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Mr3220	Version 2.0

Configuration B

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Tp Link Mr3420 Firmware	All versions

Running on/with	Platform Versions
Tp Link Mr3420	Version 2.0
Tp Link Mr3420	Version 3.0

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wa701nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Wa701nd	Version 2.0

Configuration D

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Tp Link Wa801nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Wa801nd	Version 3.0
Tp Link Wa801nd	Version 4.0

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Archer C5 Firmware	From 2_150130 to 2_260429

Running on/with	Platform Versions
Tp Link Archer C5	Version 2.0

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Archer C7 Firmware	From 2_131217 to 2_241108

Running on/with	Platform Versions
Tp Link Archer C7	Version 2.0

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Archer C7 Firmware	Version 3_150508

Running on/with	Platform Versions
Tp Link Archer C7	Version 3.0

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Archer C1900 Firmware	Before 1_260428

Running on/with	Platform Versions
Tp Link Archer C1900	Version 1.0

Configuration I

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr902ac Firmware	Version 1_160905
Tp Link Tl Wr902ac Firmware	Version 1_170628

Running on/with	Platform Versions
Tp Link Tl Wr902ac	Version 1

Configuration J

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr940n Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Wr940n	Version 2.0
Tp Link Tl Wr940n	Version 4.0
Tp Link Tl Wr940n	Version v3

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr940n Firmware	From 5_161019 to 5_220801

Running on/with	Platform Versions
Tp Link Tl Wr940n	Version 5.0

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr940n Firmware	From 6_170325 to 6_250925

Running on/with	Platform Versions
Tp Link Tl Wr940n	Version v6

Configuration M

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr940n Plus Firmware	Version 6_170704
Tp Link Tl Wr940n Plus Firmware	Version 6_171115

Running on/with	Platform Versions
Tp Link Tl Wr940n Plus	Version 6.0

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr941hp Firmware	Before 1_211210

Running on/with	Platform Versions
Tp Link Wr941hp	Version 1.0

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr941nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Tl Wr941nd	Version v5

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr941nd Firmware	From 6_150206 to 6_220610

Running on/with	Platform Versions
Tp Link Tl Wr941nd	Version v6

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wa901nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Wa901nd	Version 3.0

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wa901nd Firmware	Version 5_160929

Running on/with	Platform Versions
Tp Link Wa901nd	Version 5.0

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wa901nd Firmware	From 6_191127 to 6_220701

Running on/with	Platform Versions
Tp Link Wa901nd	Version 6.0

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wa901nd Firmware	From 4_151029 to 4_201030

Running on/with	Platform Versions
Tp Link Wa901nd	Version 4.0

Related CWEs

CWE-290

Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

References (6)

https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware

Source: zdi-disclosures@trendmicro.com

Product

https://www.tp-link.com/us/support/faq/5058/

Source: zdi-disclosures@trendmicro.com

Vendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-23-1808/

Source: zdi-disclosures@trendmicro.com

Third Party Advisory

https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware

Source: af854a3a-2127-422b-91ae-364da2661108

Product

https://www.zerodayinitiative.com/advisories/ZDI-23-1808/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.