6.5

CVE-2023-50224: TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

CVSS: 6.5v3.1MediumKEVAnalyzed
Published 03-05-2024Last modified 02-09-2026
Open JSON

Vulnerability summary

CVE-2023-50224 is a medium (CVSS 6.5) Authentication Bypass by Spoofing vulnerability in TP-Link TL-WR841N. It is known to be exploited: CISA lists it, first on 03-09-2025. EPSS estimates a 20.02% chance of exploitation in the next 30 days, higher than 97.4% of scored vulnerabilities.

Overall risk
85/100
0100
Critical · default modelHow is this calculated?
CVSS score
6.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
20.02%
0%100%
High · +4.46 pp in 30 days
KEVListedCISA
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 03-05-2024
    PublishedVulnerability first disclosed.
  2. 03-09-2025
    Added to CISA KEVTP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
  3. 24-09-2025
    CISA remediation dueApply mitigations per vendor instructions.
  4. 02-09-2026
    Last modifiedVulnerability information updated.

Description

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

20.02%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

+4.46 pp

From 15.56% on 21-09-2026

21-09-202621-10-2026
EPSS score
20.02%

Known exploited

Compare KEV catalogs
CISA KEVListed
Added
03-09-2025
Federal due date
24-09-2025

CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. www.tp-link.com/us/support/faq/4308/ nvd.nist.gov/vuln/detail/CVE-2023-50224

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Tp-link48 products

1 vendor · 48 products

References

4 links