CVE-2023-50224

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 4/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

CISA Known Exploited Vulnerability

Vendor / Product TP-Link — TL-WR841N

Date Added 2025-09-03

Remediation Due 2025-09-24

https://www.tp-link.com/us/support/faq/4308/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-50224

Weakness Classification (1)

CWE-290

Affected Software (48)

Vendor	Product	Version
tp-link	archer_c1900_firmware	< 1_260428
tp-link	archer_c5_firmware	2_150130 – 2_260429
tp-link	archer_c7_firmware	2_131217 – 2_241108
tp-link	archer_c7_firmware	3_150508
tp-link	mr3420_firmware	-
tp-link	mr3420_firmware	-
tp-link	mr6400_firmware	-
tp-link	tl-mr3020_firmware	-
tp-link	tl-mr3220_firmware	-
tp-link	tl-wdr3600_firmware	-
tp-link	tl-wdr4300_firmware	-
tp-link	tl-wr710n_firmware	-
tp-link	tl-wr740n_firmware	-
tp-link	tl-wr741nd_firmware	-
tp-link	tl-wr743nd_firmware	-
tp-link	tl-wr810n_firmware	-
tp-link	tl-wr840n_firmware	-
tp-link	tl-wr841n_firmware	-
tp-link	tl-wr841n_firmware	11_150616 – 11_211209
tp-link	tl-wr841n_firmware	12_160624 – 12_230317
tp-link	tl-wr841nd_firmware	-
tp-link	tl-wr843n_firmware	-
tp-link	tl-wr902ac_firmware	1_160905
tp-link	tl-wr902ac_firmware	1_170628
tp-link	tl-wr940n_firmware	-
tp-link	tl-wr940n_firmware	5_161019 – 5_220801
tp-link	tl-wr940n_firmware	6_170325 – 6_250925
tp-link	tl-wr940n_plus_firmware	6_170704
tp-link	tl-wr940n_plus_firmware	6_171115
tp-link	tl-wr941nd_firmware	-