CVE-2023-50224
Last modified
CVE-2023-50224 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. CISA has confirmed active exploitation in the wild. EPSS estimates a 17.45% chance of exploitation in the next 30 days.
Description
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. . Was ZDI-CAN-19899.
Metrics
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Tp-Link | Tl-Wr841n Firmware | 3.16.9 | Build 200409 |
References
- https://www.zerodayinitiative.com/advisories/ZDI-23-1808/Third Party Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-23-1808/Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-50224?
How severe is CVE-2023-50224?
How do I fix CVE-2023-50224?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-50219Inductive Automation Ignition RunQuery Deserialization of Un…8.8
- CVE-2023-5022A vulnerability has been found in DedeCMS up to 5.7.100 and …8.8
- CVE-2023-50220Inductive Automation Ignition Base64Element Deserialization …8.8
- CVE-2023-50221Inductive Automation Ignition ResponseParser SerializedRespo…8.8
- CVE-2023-50222Inductive Automation Ignition ResponseParser Notification De…8.8
- CVE-2023-50223Inductive Automation Ignition ExtendedDocumentCodec Deserial…8.8
- CVE-2023-50225TP-Link TL-WR902AC dm_fillObjByStr Stack-based Buffer Overfl…6.8
- CVE-2023-50226Parallels Desktop Updater Link Following Local Privilege Esc…7.8
- CVE-2023-50227Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code…8.3
- CVE-2023-50228Parallels Desktop Updater Improper Verification of Cryptogra…7.8
- CVE-2023-50229BlueZ Phone Book Access Profile Heap-based Buffer Overflow R…8
- CVE-2023-5023A vulnerability was found in Tongda OA 2017 and classified a…8.8
Are you affected by CVE-2023-50224?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST