Vulnerability Analysis
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
CVE-2023-50224
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. . Was ZDI-CAN-19899.
CISA KEV
CVSS Base Score
6.5
MEDIUM
Exploitability:2.9
Impact Score:3.6
Temporal Score:-
EPSS:17.45%
Threat Intelligence Signals
CISA KEV
YES
KEV Date Added
2025-09-03
Ransomware Use
Unknown
KEV Due Date
2025-09-24
VulnCheck In-the-Wild
No
Nuclei Template
No
EPSS Score
17.450%
EPSS Percentile
96.7th pct
GHSA ID
GitHub Severity
MODERATE
SSVC Exploitation
—
SSVC Automatable
—
Vulnerability Class
—
Identity & Timeline
| Status | - |
| Assigning Authority | - |
| CVSS Version / Source | - |
| Reserved | - |
| Published | - |
| Patch Date (date_public) | - |
| Exploit DB Date | - |
| First GitHub PoC Date | - |
| Last Updated | - |
| Time to Patch (Days to fix) | - |
| Exploit Release Gap | - |
| PoC Release Gap | - |
| Exploit DB References | None identified |
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| No affected products specified. | ||
Social Buzz