GCVE - cpe:2.3:h:tp-link:tl-wr841n:13.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:tp-link:tl-wr841n:13.0:*:*:*:*:*:*:*

part: h version: 13.0 update: *

Vendor	Tp Link (`0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e`)
Product	Tl Wr841N (`7181d478-1daf-5a24-8192-0263db30d566`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-5039`	not_vulnerable	2026-06-08 08:07:02.918784	Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from default web management credentials, making the key predictable if device is left in default configuration. A network-adjacent attacker can exploit this weakness to gain unauthorized access to the protocol, read debug data, modify certain device configuration values, and trigger device reboot, resulting in loss of integrity and a denial-of-service condition. Published: 2026-04-23T16:10:13.269Z Updated: 2026-04-28T17:45:30.438Z Open on db.gcve.eu Reference links https://www.tp-link.com/us/support/download/tl-wr841n/v13/#Firmware	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-12577`	not_vulnerable	2026-06-08 05:10:41.769536	Details available The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection. Published: 2018-07-02T16:00:00.000Z Updated: 2024-08-05T08:38:06.318Z Open on db.gcve.eu Reference links https://software-talk.org/blog/2018/06/tplink-wr841n-code-exec-cve-2018-12577/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-12576`	not_vulnerable	2026-06-08 05:10:41.769223	Details available TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking. Published: 2018-07-02T16:00:00.000Z Updated: 2024-08-05T08:38:06.393Z Open on db.gcve.eu Reference links https://software-talk.org/blog/2018/04/tplink-wr841n-clickjacking-https/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-12575`	not_vulnerable	2026-06-08 05:10:41.768878	Details available On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request. Published: 2018-07-02T16:00:00.000Z Updated: 2024-08-05T08:38:06.349Z Open on db.gcve.eu Reference links https://software-talk.org/blog/2018/06/tplink-wr841n-broken-auth-cve-2018-12575/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-12574`	not_vulnerable	2026-06-08 05:10:41.767690	Details available CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices. Published: 2018-07-02T16:00:00.000Z Updated: 2024-08-05T08:38:06.301Z Open on db.gcve.eu Reference links https://software-talk.org/blog/2018/06/tplink-wr841n-csrf-cve-2018-12574/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-11714`	not_vulnerable	2026-06-08 05:10:38.849298	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.