rewindex

RewindexCVEs

CVE-2023-50224: TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability

Medium · CVSS 6.5 (CVSS 3.1)KEV known exploitedEPSS 20.0%, 97th percentilePublished Updated Assigner: zdi

In CISA’s Known Exploited Vulnerabilities catalog: TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability.

Added , federal remediation due . Known ransomware use: Unknown.

Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

Vector CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · CWE-290

Status incidents that name it

No tracked status incident names this CVE.

Affected vendors and products

tp-link: tl-wr841n_firmwareTP-Link: Archer C5TP-Link: Archer C7TP-Link: TL-MR3420TP-Link: TL-MR6400TP-Link: TL-WA801NDTP-Link: TL-WA901NDTP-Link: TL-WDR3500TP-Link: TL-WDR3600TP-Link: TL-WDR4300TP-Link: TL-WR1043NDTP-Link: TL-WR1045NDTP-Link: TL-WR740NTP-Link: TL-WR741NDTP-Link: TL-WR749NTP-Link: TL-WR840NTP-Link: TL-WR841NTP-Link: TL-WR841NDTP-Link: TL-WR842NTP-Link: TL-WR842NDTP-Link: TL-WR845NTP-Link: TL-WR941NDTP-Link: TL-WR945N

References

All CVEsMarkdownJSON