Refine your search
2 vulnerabilities found for TL-WR740N by TP-Link
CVE-2023-50224 (GCVE-0-2023-50224)
Vulnerability from cvelistv5
Published
2024-05-03 02:14
Modified
2026-09-02 17:58
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-290 - Authentication Bypass by Spoofing
Summary
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| TP-Link | TL-WR841N |
Version: 3.16.9 build 200409 < Version: V8 < Version: V9 < Version: V10 < Version: V11 < Patch: V11_211209 Version: V12 < Patch: V12_230317 |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "tl-wr841n_firmware",
"vendor": "tp-link",
"versions": [
{
"lessThan": "12.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50224",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-09-03T03:55:22.977218Z",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2025-09-03",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224"
},
"type": "kev"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-21T23:05:19.610Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-09-03T00:00:00.000Z",
"value": "CVE-2023-50224 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T22:09:49.801Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ZDI-23-1808",
"tags": [
"x_research-advisory",
"x_transferred"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/"
},
{
"name": "vendor-provided URL",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "TL-WR841N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "3.16.9 build 200409",
"versionType": "custom"
},
{
"status": "affected",
"version": "V8",
"versionType": "custom"
},
{
"status": "affected",
"version": "V9",
"versionType": "custom"
},
{
"status": "affected",
"version": "V10",
"versionType": "custom"
},
{
"status": "affected",
"version": "V11",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V11_211209",
"versionType": "custom"
},
{
"status": "affected",
"version": "V12",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V12_230317",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR841ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V8",
"versionType": "custom"
},
{
"status": "affected",
"version": "V9",
"versionType": "custom"
},
{
"status": "affected",
"version": "V10",
"versionType": "custom"
},
{
"status": "affected",
"version": "V11",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V11_211209",
"versionType": "custom"
},
{
"status": "affected",
"version": "V12",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V12_230317",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-MR6400",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
},
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Archer C5",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Archer C7",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V2_241108",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR3600",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR4300",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WDR3500",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR740N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
},
{
"status": "affected",
"version": "V7",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR741ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR749N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "BR 6.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "BR 7.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-MR3420",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR1043ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR1045ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "RU V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR840N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR842N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR842ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V2",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR845N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
},
{
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR941ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "affected",
"version": "V6",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V6_220610",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WR945N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V1",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WA801ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "TL-WA901ND",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "V3",
"versionType": "custom"
},
{
"status": "affected",
"version": "V4",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V4_201030",
"versionType": "custom"
},
{
"status": "affected",
"version": "V5",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "V5_201030",
"versionType": "custom"
}
]
}
],
"dateAssigned": "2023-12-05T19:37:00.000Z",
"datePublic": "2023-12-19T16:08:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eTP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.\u003c/p\u003e"
}
],
"value": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-290",
"description": "CWE-290: Authentication Bypass by Spoofing",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-02T17:58:31.299Z",
"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"shortName": "zdi"
},
"references": [
{
"name": "ZDI-23-1808",
"tags": [
"x_research-advisory"
],
"url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/"
},
{
"name": "vendor-provided URL",
"tags": [
"vendor-advisory"
],
"url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware"
},
{
"name": "vendor-advisory",
"tags": [
"vendor-advisory"
],
"url": "https://www.tp-link.com/us/support/faq/5058/"
}
],
"source": {
"lang": "en",
"value": "Aleksandar Djurdjevic \u0027revengsmK\u0027"
},
"title": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
"assignerShortName": "zdi",
"cveId": "CVE-2023-50224",
"datePublished": "2024-05-03T02:14:42.922Z",
"dateReserved": "2023-12-05T16:15:17.543Z",
"dateUpdated": "2026-09-02T17:58:31.299Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2022-4296 (GCVE-0-2022-4296)
Vulnerability from cvelistv5
Published
2022-12-06 00:00
Modified
2025-04-15 13:08
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-404 - Denial of Service -> CWE-400 Resource Consumption
Summary
A vulnerability classified as problematic has been found in TP-Link TL-WR740N. Affected is an unknown function of the component ARP Handler. The manipulation leads to resource consumption. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214812.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T01:34:50.051Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.youtube.com/watch?v=D--fb-cesmA"
},
{
"tags": [
"x_transferred"
],
"url": "https://vuldb.com/?id.214812"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2022-4296",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-04-14T16:55:45.647684Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-04-15T13:08:37.367Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "TL-WR740N",
"vendor": "TP-Link",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability classified as problematic has been found in TP-Link TL-WR740N. Affected is an unknown function of the component ARP Handler. The manipulation leads to resource consumption. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214812."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-404",
"description": "CWE-404 Denial of Service -\u003e CWE-400 Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-12-06T00:00:00.000Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"url": "https://www.youtube.com/watch?v=D--fb-cesmA"
},
{
"url": "https://vuldb.com/?id.214812"
}
],
"title": "TP-Link TL-WR740N ARP resource consumption",
"x_generator": "vuldb.com"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2022-4296",
"datePublished": "2022-12-06T00:00:00.000Z",
"dateReserved": "2022-12-06T00:00:00.000Z",
"dateUpdated": "2025-04-15T13:08:37.367Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}