TP-LINK TL-WR841N router
Approved changes feed: RSS · Atom
cpe:2.3:h:tp-link:tl-wr841n:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Tp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e) |
|---|---|
| Product | Tl Wr841N (7181d478-1daf-5a24-8192-0263db30d566) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-39471 |
vulnerable | 2026-06-08 06:09:37.552192 |
TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability
HIGH (7.5)
TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the ated_tp service. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21825.
Published: 2024-05-03T02:10:38.498Z
Updated: 2024-08-02T18:10:20.683Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36489 |
not_vulnerable | 2026-06-08 06:08:12.054270 |
Details available
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802N(JP)_V4_221008', TL-WR841N firmware versions prior to 'TL-WR841N(JP)_V14_230506', and TL-WR902AC firmware versions prior to 'TL-WR902AC(JP)_V3_230506'.
Published: 2023-09-06T09:35:41.575Z
Updated: 2024-09-26T20:03:19.698Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36354 |
vulnerable | 2026-06-08 06:08:11.169148 |
Details available
TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlTimeSchedRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.
Published: 2023-06-22T00:00:00.000Z
Updated: 2024-12-02T21:17:28.146Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46912 |
not_vulnerable | 2026-06-08 05:50:39.749315 |
Details available
An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.
Published: 2022-12-20T00:00:00.000Z
Updated: 2025-04-16T17:37:39.770Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42433 |
not_vulnerable | 2026-06-08 05:49:29.881184 |
Details available
MEDIUM (6.4)
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841N(US)_V14_220121 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the ated_tp service. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-17356.
Published: 2023-03-29T00:00:00.000Z
Updated: 2025-02-14T20:24:33.071Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17147 |
not_vulnerable | 2026-06-08 05:13:10.040630 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6316 |
vulnerable | 2026-06-08 05:02:59.899232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6276 |
vulnerable | 2026-06-08 05:02:59.870131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5687 |
vulnerable | 2026-06-08 05:02:58.045182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.