CVE-2023-50224: listed in the CISA KEV catalog

CVE-2023-50224 · CVSS 6.5 MEDIUM · EPSS 16% · KEV 2025-09-03

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. . Was ZDI-CAN-19899.

Is CVE-2023-50224 exploited?

• Listed in the CISA KEV catalog on 2025-09-03.
• Federal remediation due 2025-09-24.
• Past that date by 381 days.
• EPSS puts exploitation in the next 30 days at 16%.
• Public exploit code: none found in monitored sources.

Which products and versions are affected?

No affected package list recorded here yet.

Is there a patch?

No patch identifier recorded here yet.

What PlainSec published about CVE-2023-50224

• TP-Link router flaws move into court and FCC fights (2026-10-10)

Primary sources

• NVD record
• CISA KEV catalog

What this record does not say

• No affected package data.
• No patch identifier.

KEV and EPSS are re-checked daily. Record last updated 2026-10-09.