coldbraid

CVE-2023-50224 TP-Link TL-WR841N

TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

CVSS
not scored

CWE-290

On CISA’s exploited list

TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

Added
2025-09-03
Federal patch deadline
2025-09-24
Ransomware use
not known