CVE-2023-50224
CWE-290
82.5
RPSRPS range: 0–105; KEV-listed vulnerabilities can receive an exploitation amplifier.
Description
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
Source: NVD
Signals
- CVSS
- 6.5
- Medium · v3.1
- EPSS
- 15.55%
- Probability of exploitation in the next 30 days (FIRST)
- CISA KEV
- In CISA KEV since Sept 2025
- Fix commit
- No known fix commit
- Sources: MoreFixes, FreshFixes
- Weakness
- CWE-290
- Published
- 3 May 2024
- Last modified 3 Sept 2026
How to read these signals: RPS · EPSS · CISA KEV · Data sources
Get this score from the API
curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
https://api.intelligence.devsecure.io/api/v1/rps/CVE-2023-50224Replace the placeholder with your key. Get a free API key or rank your own CVEs.
Data as of 7 Oct 2026, 05:16 UK time