boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2023-50224

CVE-2023-50224MEDIUM
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   A   L   N   N  U  H  N  N    6.5   .1556   96.7   YES
AFFECTED
  Product     Versions               Fixed
  TL-WR841N   3.16.9 build 200409 –  V11_211209
  TL-WR841ND  V8 –                   V11_211209
  TL-MR6400   V1 –                   —
  Archer C5   V2 –                   —
  Archer C7   V2 –                   V2_241108
  TL-WDR3600  V2 –                   —
  TL-WDR4300  V1 –                   —
  TL-WDR3500  V2 –                   —
  TL-WR740N   V4 –                   —
  TL-WR741ND  V4 –                   —
  + 12 more
TIMELINE
  Dec 5   Reserved by zdi
  May 3   Published (CNA: zdi)
  Sep 3   Added to CISA KEV, remediation due 2025-09-24
  Sep 2   PATCH SHIPPED — CVE-2023-50224 (TP-Link TL-WR841N). Fixed in TL-WR841N V11_211209.
CWE-290 · CNA: zdi · CVSS v3.1 · 4 references · NVD status: Analyzed · KEV due September 24, 2025

Description

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

Lifecycle

Complete event history — 4 events, chronological
DateEventDetail
December 5, 2023ReservedReserved by zdi
May 3, 2024PublishedPublished (CNA: zdi)
September 3, 2025KEV ADDEDAdded to CISA KEV, remediation due 2025-09-24
September 2, 2026PATCH SHIPPEDPATCH SHIPPED — CVE-2023-50224 (TP-Link TL-WR841N). Fixed in TL-WR841N V11_211209.

Affected

Affected products and packages — 22 rows
VendorProduct / PackageEcosystemVersion introducedFixed
TP-LinkTL-WR841N—3.16.9 build 200409V11_211209
TP-LinkTL-WR841ND—V8V11_211209
TP-LinkTL-MR6400—V1—
TP-LinkArcher C5—V2—
TP-LinkArcher C7—V2V2_241108
TP-LinkTL-WDR3600—V2—
TP-LinkTL-WDR4300—V1—
TP-LinkTL-WDR3500—V2—
TP-LinkTL-WR740N—V4—
TP-LinkTL-WR741ND—V4—
TP-LinkTL-WR749N—BR 6.0—
TP-LinkTL-MR3420—V2—
TP-LinkTL-WR1043ND—V2—
TP-LinkTL-WR1045ND—RU V2—
TP-LinkTL-WR840N—V2—
TP-LinkTL-WR842N—V2—
TP-LinkTL-WR842ND—V2—
TP-LinkTL-WR845N—V1—
TP-LinkTL-WR941ND—V5V6_220610
TP-LinkTL-WR945N—V1—
TP-LinkTL-WA801ND—V3—
TP-LinkTL-WA901ND—V3V4_201030

Weaknesses

CWE-290

References (4)

Related

Authoritative record: CVE-2023-50224 at cve.org

Vendors: tp-link

Weaknesses: CWE-290

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2023-50224 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.