Known Exploited Vulnerabilities September 03, 2025 · CISA KEV Catalog

CVE-2023-50224: TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2023-50224 TP-Link
Related: CVE-2025-9377: TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability Known Exploited Vulnerabilities · Sep 03, 2025
CVE-2020-24363: TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability Known Exploited Vulnerabilities · Sep 02, 2025
CVE-2023-33538: TP-Link Multiple Routers Command Injection Vulnerability Known Exploited Vulnerabilities · Jun 16, 2025