CVE-2023-50224

Katalog CVE

CVSS 6.5 · Medium KEV · sudah dieksploitasi EPSS 17,5%

Kerentanan Authentication Bypass by Spoofing pada tp-link tl-wr841n firmware, tp-link mr6400 firmware +34 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut trendmicro.com. Masuk katalog KEV CISA pada 3 September 2025, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

Rincian

Terbit di NVD

3 Mei 2024

Terakhir diubah

3 September 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber trendmicro.com
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-290: Authentication Bypass by Spoofing

EPSS (30 hari)

17,5% peluang dieksploitasi; lebih tinggi dari 97,0% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

Masuk KEV

3 September 2025

Tenggat CISA

24 September 2025 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.tp-link.com/us/support/faq/5058/ advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224 pemerintah AS
• https://www.zerodayinitiative.com/advisories/ZDI-23-1808/ advisory pihak ketiga
• https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware product