Vulnerability in Tp Link Tl Wr841n
CVSS Skor
6.5
EPSS İhtimal
%17.0
Risk Skoru
2.2
Yayın
2 yıl önce
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Envanterimdeki Etkisi
Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.
Oturum kontrol ediliyor…
Zafiyet Açıklaması
DayBreach CVE AI Araştırması
CVE-2023-50224 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
IMPACT — Etkilenen Ürünler ve Yazılımlar
Affected Products
The following products are affected by CVE-2023-50224 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.
| ID | VENDOR | PRODUCT | ACTION |
|---|---|---|---|
| 1 | tp-link | tl-wr841n firmware | İncele |
| 2 | tp-link | tl-wr841n | İncele |
| 3 | tp-link | tl-wr841n | İncele |
| 4 | tp-link | tl-wr841n | İncele |
| 5 | tp-link | tl-wr841n firmware | İncele |
| 6 | tp-link | tl-wr841n | İncele |
| 7 | tp-link | tl-wr841n firmware | İncele |
| 8 | tp-link | tl-wr841n | İncele |
| 9 | tp-link | mr6400 firmware | İncele |
| 10 | tp-link | mr6400 | İncele |
| 11 | tp-link | mr6400 | İncele |
| 12 | tp-link | tl-wdr3600 firmware | İncele |
| 13 | tp-link | tl-wdr3600 | İncele |
| 14 | tp-link | tl-wdr4300 firmware | İncele |
| 15 | tp-link | tl-wdr4300 | İncele |
| 16 | tp-link | wdr3500 firmware | İncele |
| 17 | tp-link | wdr3500 | İncele |
| 18 | tp-link | tl-wr710n firmware | İncele |
| 19 | tp-link | tl-wr710n | İncele |
| 20 | tp-link | tl-wr710n | İncele |
| 21 | tp-link | tl-wr740n firmware | İncele |
| 22 | tp-link | tl-wr740n | İncele |
| 23 | tp-link | tl-wr740n | İncele |
| 24 | tp-link | tl-wr740n | İncele |
| 25 | tp-link | tl-wr740n | İncele |
| 26 | tp-link | tl-wr741nd firmware | İncele |
| 27 | tp-link | tl-wr741nd | İncele |
| 28 | tp-link | tl-wr741nd | İncele |
| 29 | tp-link | tl-wr741nd | İncele |
| 30 | tp-link | tl-wr741nd | İncele |
| 31 | tp-link | tl-wr743nd firmware | İncele |
| 32 | tp-link | tl-wr743nd | İncele |
| 33 | tp-link | wr749n firmware | İncele |
| 34 | tp-link | wr749n | İncele |
| 35 | tp-link | wr749n | İncele |
| 36 | tp-link | mr3420 firmware | İncele |
| 37 | tp-link | mr3420 | İncele |
| 38 | tp-link | mr3420 | İncele |
| 39 | tp-link | mr3420 | İncele |
| 40 | tp-link | wr1043nd firmware | İncele |
| 41 | tp-link | wr1043nd | İncele |
| 42 | tp-link | wr1043nd | İncele |
| 43 | tp-link | wr1043nd | İncele |
| 44 | tp-link | wr1045nd firmware | İncele |
| 45 | tp-link | wr1045nd | İncele |
| 46 | tp-link | wr802n firmware | İncele |
| 47 | tp-link | wr802n | İncele |
| 48 | tp-link | wr802n | İncele |
| 49 | tp-link | wr802n | İncele |
| 50 | tp-link | tl-wr810n firmware | İncele |
| 51 | tp-link | tl-wr810n | İncele |
| 52 | tp-link | tl-wr810n | İncele |
| 53 | tp-link | tl-wr840n firmware | İncele |
| 54 | tp-link | tl-wr840n | İncele |
| 55 | tp-link | tl-wr840n | İncele |
| 56 | tp-link | wr841hp firmware | İncele |
| 57 | tp-link | wr841hp | İncele |
| 58 | tp-link | wr841hp | İncele |
| 59 | tp-link | tl-wr841nd firmware | İncele |
| 60 | tp-link | tl-wr841nd | İncele |
| 61 | tp-link | wr842n firmware | İncele |
| 62 | tp-link | wr842n | İncele |
| 63 | tp-link | wr842n | İncele |
| 64 | tp-link | wr842n | İncele |
| 65 | tp-link | wr842nd firmware | İncele |
| 66 | tp-link | wr842nd | İncele |
| 67 | tp-link | wr842nd | İncele |
| 68 | tp-link | wr842nd | İncele |
| 69 | tp-link | tl-wr843n firmware | İncele |
| 70 | tp-link | tl-wr843n | İncele |
| 71 | tp-link | tl-wr843n | İncele |
| 72 | tp-link | wr845n firmware | İncele |
| 73 | tp-link | wr845n | İncele |
| 74 | tp-link | wr845n | İncele |
| 75 | tp-link | wr945n firmware | İncele |
| 76 | tp-link | wr945n | İncele |
| 77 | tp-link | tl-mr3020 firmware | İncele |
| 78 | tp-link | tl-mr3020 | İncele |
| 79 | tp-link | tl-mr3220 firmware | İncele |
| 80 | tp-link | tl-mr3220 | İncele |
| 81 | tp-link | wa701nd firmware | İncele |
| 82 | tp-link | wa701nd | İncele |
| 83 | tp-link | wa801nd firmware | İncele |
| 84 | tp-link | wa801nd | İncele |
| 85 | tp-link | wa801nd | İncele |
| 86 | tp-link | archer c5 firmware | İncele |
| 87 | tp-link | archer c5 | İncele |
| 88 | tp-link | archer c7 firmware | İncele |
| 89 | tp-link | archer c7 | İncele |
| 90 | tp-link | archer c7 firmware | İncele |
| 91 | tp-link | archer c7 | İncele |
| 92 | tp-link | archer c1900 firmware | İncele |
| 93 | tp-link | archer c1900 | İncele |
| 94 | tp-link | tl-wr902ac firmware | İncele |
| 95 | tp-link | tl-wr902ac firmware | İncele |
| 96 | tp-link | tl-wr902ac | İncele |
| 97 | tp-link | tl-wr940n firmware | İncele |
| 98 | tp-link | tl-wr940n | İncele |
| 99 | tp-link | tl-wr940n | İncele |
| 100 | tp-link | tl-wr940n | İncele |
| 101 | tp-link | tl-wr940n firmware | İncele |
| 102 | tp-link | tl-wr940n | İncele |
| 103 | tp-link | tl-wr940n firmware | İncele |
| 104 | tp-link | tl-wr940n | İncele |
| 105 | tp-link | tl-wr940n plus firmware | İncele |
| 106 | tp-link | tl-wr940n plus firmware | İncele |
| 107 | tp-link | tl-wr940n plus | İncele |
| 108 | tp-link | wr941hp firmware | İncele |
| 109 | tp-link | wr941hp | İncele |
| 110 | tp-link | tl-wr941nd firmware | İncele |
| 111 | tp-link | tl-wr941nd | İncele |
| 112 | tp-link | tl-wr941nd firmware | İncele |
| 113 | tp-link | tl-wr941nd | İncele |
| 114 | tp-link | wa901nd firmware | İncele |
| 115 | tp-link | wa901nd | İncele |
| 116 | tp-link | wa901nd firmware | İncele |
| 117 | tp-link | wa901nd | İncele |
| 118 | tp-link | wa901nd firmware | İncele |
| 119 | tp-link | wa901nd | İncele |
| 120 | tp-link | wa901nd firmware | İncele |
| 121 | tp-link | wa901nd | İncele |
| 122 | tp-link | tl-wr841n | İncele |
RED HAT CSAF/VEX — Ürün Etki Kontrolü
SCORING — CVSS Çoklu Kaynak Skoru
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.
| SCORE | VERSION | SEVERITY | VECTOR | SOURCE |
|---|---|---|---|---|
| 6.5 | CVSS V31 | MEDIUM | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | NVD |
Yama ve İyileştirme Rehberi (Solution)
Solution & Remediation Advisory
Resmî yama doğrulanamadı; geçici azaltım veya workaround mevcut.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Public exploit ve aktif sömürü durumu
Doğrulanmış exploit istihbaratı
Bu CVE CISA KEV kataloğunda aktif sömürülen olarak işaretli; ancak henüz doğrulanmış, indirilebilir bir public PoC veya Metasploit modülü bulunamadı. Aktif sömürü kanıtı public exploit kodu bulunduğu anlamına gelmez.
Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)
CWE - Common Weakness Enumeration
While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2023-50224 is associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2023-50224 weaknesses.
Saldırı Vektörü ve Erişilebilirlik Karakteristiği
Resmi Kaynaklar ve Danışma Bültenleri
İlgili Benzer Açıklar
Code injection in Tp Link Tl Wr840n
OS command injection in Tp Link Tl Wr840n
OS command injection in Tp Link Tl Wr840n
OS command injection in Tp Link Tl Wr840n
Vulnerability in Tp Link Archer Ax50 Firmware
Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2023-50224"