Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.
CVE-2023-50224 is a vulnerability classified as Authentication Bypass by Spoofing, affecting TL-WR841N (affected versions: 3.16.9 build 200409, V8, and other affected versions), TL-WR841ND (affected versions: V8, V9, and other affected versions), TL-MR6400 (affected versions: V1 and V2), and 19 more products. This vulnerability is rated Medium, with a CVSS score of 6.5. This vulnerability has been observed being exploited in the wild.
A short verification protects the vulnerability source and prevents automated AI abuse.
Verifying...
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
en
