TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| TP-Link | TL-WR841N | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WR841ND | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-MR6400 | affected |
|
|||||||||||||||||||||||||||
| TP-Link | Archer C5 | affected |
|
|||||||||||||||||||||||||||
| TP-Link | Archer C7 | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WDR3600 | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WDR4300 | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WDR3500 | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WR740N | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WR741ND | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WR749N | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-MR3420 | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WR1043ND | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WR1045ND | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WR840N | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WR842N | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WR842ND | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WR845N | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WR941ND | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WR945N | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WA801ND | affected |
|
|||||||||||||||||||||||||||
| TP-Link | TL-WA901ND | affected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
Configuration 6 [-]
| AND |
|
Configuration 7 [-]
| AND |
|
Configuration 8 [-]
| AND |
|
Configuration 9 [-]
| AND |
|
Configuration 10 [-]
| AND |
|
Configuration 11 [-]
| AND |
|
Configuration 12 [-]
| AND |
|
Configuration 13 [-]
| AND |
|
Configuration 14 [-]
| AND |
|
Configuration 15 [-]
| AND |
|
Configuration 16 [-]
| AND |
|
Configuration 17 [-]
| AND |
|
Configuration 18 [-]
| AND |
|
Configuration 19 [-]
| AND |
|
Configuration 20 [-]
| AND |
|
Configuration 21 [-]
| AND |
|
Configuration 22 [-]
| AND |
|
Configuration 23 [-]
| AND |
|
Configuration 24 [-]
| AND |
|
Configuration 25 [-]
| AND |
|
Configuration 26 [-]
| AND |
|
Configuration 27 [-]
| AND |
|
Configuration 28 [-]
| AND |
|
Configuration 29 [-]
| AND |
|
Configuration 30 [-]
| AND |
|
Configuration 31 [-]
| AND |
|
Configuration 32 [-]
| AND |
|
Configuration 33 [-]
| AND |
|
Configuration 34 [-]
| AND |
|
Configuration 35 [-]
| AND |
|
Configuration 36 [-]
| AND |
|
Configuration 37 [-]
| AND |
|
Configuration 38 [-]
| AND |
|
Configuration 39 [-]
| AND |
|
Configuration 40 [-]
| AND |
|
Configuration 41 [-]
| AND |
|
Configuration 42 [-]
| AND |
|
Configuration 43 [-]
| AND |
|
Configuration 44 [-]
| AND |
|
Configuration 45 [-]
| AND |
|
Configuration 46 [-]
| AND |
|
No data.
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2023-55046 | TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. . Was ZDI-CAN-19899. |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is in the KEV database since Sept. 3, 2025.
Exploit prediction score: 20.0% (20.021% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Tp-link archer C1900
Tp-link archer C1900 Firmware Tp-link archer C5 Tp-link archer C5 Firmware Tp-link archer C7 Tp-link archer C7 Firmware Tp-link mr3420 Tp-link mr3420 Firmware Tp-link mr6400 Tp-link mr6400 Firmware Tp-link tl-mr3020 Tp-link tl-mr3020 Firmware Tp-link tl-mr3220 Tp-link tl-mr3220 Firmware Tp-link tl-wdr3600 Tp-link tl-wdr3600 Firmware Tp-link tl-wdr4300 Tp-link tl-wdr4300 Firmware Tp-link tl-wr710n Tp-link tl-wr710n Firmware Tp-link tl-wr740n Tp-link tl-wr740n Firmware Tp-link tl-wr741nd Tp-link tl-wr741nd Firmware Tp-link tl-wr743nd Tp-link tl-wr743nd Firmware Tp-link tl-wr810n Tp-link tl-wr810n Firmware Tp-link tl-wr840n Tp-link tl-wr840n Firmware Tp-link tl-wr841nd Tp-link tl-wr841nd Firmware Tp-link tl-wr843n Tp-link tl-wr843n Firmware Tp-link tl-wr902ac Tp-link tl-wr902ac Firmware Tp-link tl-wr940n Tp-link tl-wr940n Firmware Tp-link tl-wr940n Plus Tp-link tl-wr940n Plus Firmware Tp-link tl-wr941nd Tp-link tl-wr941nd Firmware Tp-link wa701nd Tp-link wa701nd Firmware Tp-link wa801nd Tp-link wa801nd Firmware Tp-link wa901nd Tp-link wa901nd Firmware Tp-link wdr3500 Tp-link wdr3500 Firmware Tp-link wr1043nd Tp-link wr1043nd Firmware Tp-link wr1045nd Tp-link wr1045nd Firmware Tp-link wr749n Tp-link wr749n Firmware Tp-link wr802n Tp-link wr802n Firmware Tp-link wr841hp Tp-link wr841hp Firmware Tp-link wr842n Tp-link wr842n Firmware Tp-link wr842nd Tp-link wr842nd Firmware Tp-link wr845n Tp-link wr845n Firmware Tp-link wr941hp Tp-link wr941hp Firmware Tp-link wr945n Tp-link wr945n Firmware |
|
| CPEs | cpe:2.3:h:tp-link:archer_c1900:1.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:archer_c5:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:archer_c7:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:archer_c7:3.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:mr3420:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:mr3420:3.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:mr3420:4.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:mr6400:1.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:mr6400:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-mr3020:1.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-mr3220:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wdr3600:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wdr4300:1:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr710n:1.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr710n:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr740n:4.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr740n:5.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr740n:6.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr740n:7.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr741nd:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr741nd:4.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr741nd:5:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr741nd:6.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr743nd:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr810n:1.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr810n:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr840n:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr840n:3.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr841n:10:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr841n:11:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr841n:8.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr841n:9:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr841nd:11.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr843n:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr843n:3.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr902ac:1:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr940n:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr940n:4.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr940n:5.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr940n:v3:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr940n:v6:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr940n_plus:6.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr941nd:v5:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tl-wr941nd:v6:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wa701nd:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wa801nd:3.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wa801nd:4.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wa901nd:3.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wa901nd:4.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wa901nd:5.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wa901nd:6.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wdr3500:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr1043nd:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr1043nd:3.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr1043nd:4.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr1045nd:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr749n:6.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr749n:7.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr802n:1.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr802n:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr802n:3.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr841hp:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr841hp:3.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr842n:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr842n:3.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr842n:4.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr842nd:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr842nd:3.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr842nd:4.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr845n:1.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr845n:2.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr941hp:1.0:*:*:*:*:*:*:* cpe:2.3:h:tp-link:wr945n:1.0:*:*:*:*:*:*:* cpe:2.3:o:tp-link:archer_c1900_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:archer_c5_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:archer_c7_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:archer_c7_firmware:3_150508:*:*:*:*:*:*:* cpe:2.3:o:tp-link:mr3420_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:mr6400_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-mr3020_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-mr3220_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wdr3600_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wdr4300_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr710n_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr740n_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr741nd_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr743nd_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr810n_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr840n_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr841nd_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr843n_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_160905:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr902ac_firmware:1_170628:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr940n_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr940n_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_170704:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr940n_plus_firmware:6_171115:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr941nd_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr941nd_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wa701nd_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wa801nd_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wa901nd_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wa901nd_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wa901nd_firmware:5_160929:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wdr3500_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wr1043nd_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wr1045nd_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wr749n_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wr802n_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wr841hp_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wr842n_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wr842nd_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wr845n_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wr941hp_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:tp-link:wr945n_firmware:-:*:*:*:*:*:*:* |
|
| Vendors & Products |
Tp-link archer C1900
Tp-link archer C1900 Firmware Tp-link archer C5 Tp-link archer C5 Firmware Tp-link archer C7 Tp-link archer C7 Firmware Tp-link mr3420 Tp-link mr3420 Firmware Tp-link mr6400 Tp-link mr6400 Firmware Tp-link tl-mr3020 Tp-link tl-mr3020 Firmware Tp-link tl-mr3220 Tp-link tl-mr3220 Firmware Tp-link tl-wdr3600 Tp-link tl-wdr3600 Firmware Tp-link tl-wdr4300 Tp-link tl-wdr4300 Firmware Tp-link tl-wr710n Tp-link tl-wr710n Firmware Tp-link tl-wr740n Tp-link tl-wr740n Firmware Tp-link tl-wr741nd Tp-link tl-wr741nd Firmware Tp-link tl-wr743nd Tp-link tl-wr743nd Firmware Tp-link tl-wr810n Tp-link tl-wr810n Firmware Tp-link tl-wr840n Tp-link tl-wr840n Firmware Tp-link tl-wr841nd Tp-link tl-wr841nd Firmware Tp-link tl-wr843n Tp-link tl-wr843n Firmware Tp-link tl-wr902ac Tp-link tl-wr902ac Firmware Tp-link tl-wr940n Tp-link tl-wr940n Firmware Tp-link tl-wr940n Plus Tp-link tl-wr940n Plus Firmware Tp-link tl-wr941nd Tp-link tl-wr941nd Firmware Tp-link wa701nd Tp-link wa701nd Firmware Tp-link wa801nd Tp-link wa801nd Firmware Tp-link wa901nd Tp-link wa901nd Firmware Tp-link wdr3500 Tp-link wdr3500 Firmware Tp-link wr1043nd Tp-link wr1043nd Firmware Tp-link wr1045nd Tp-link wr1045nd Firmware Tp-link wr749n Tp-link wr749n Firmware Tp-link wr802n Tp-link wr802n Firmware Tp-link wr841hp Tp-link wr841hp Firmware Tp-link wr842n Tp-link wr842n Firmware Tp-link wr842nd Tp-link wr842nd Firmware Tp-link wr845n Tp-link wr845n Firmware Tp-link wr941hp Tp-link wr941hp Firmware Tp-link wr945n Tp-link wr945n Firmware |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_0
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. . Was ZDI-CAN-19899. | TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899. |
| References |
| |
| Metrics |
cvssV3_1
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
kev
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Tp-link tl-wr841n
|
|
| CPEs | cpe:2.3:h:tp-link:tl-wr841n:12:*:*:*:*:*:*:* cpe:2.3:o:tp-link:tl-wr841n_firmware:3.16.9:build_200409:*:*:*:*:*:* |
|
| Vendors & Products |
Tp-link tl-wr841n
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Tp-link
Tp-link tl-wr841n Firmware |
|
| CPEs | cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:* | |
| Vendors & Products |
Tp-link
Tp-link tl-wr841n Firmware |
|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899. | TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. . Was ZDI-CAN-19899. |