Tl-wr841n Firmware (Tp-link) - vulnerabilities (CVEs)

39 CVEs, 0 in the last 30 days, 26 known versions, newest CVE from 2026-06-29. Vendor: Tp-link.

CVEs of Tl-wr841n Firmware

CVE-2026-9105 - CVSS 6.8 (medium), 2026-06-29: An authenticated stack-based buffer overflow vulnerability exists in the web management interface of TP-Link TL-WR841N v14. A remote authenticated attacker…
CVE-2026-5039 - CVSS 8.8 (high), 2026-04-23: TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from default web management credentials, making…
CVE-2026-3622 - CVSS 7.5 (high), 2026-03-26: The vulnerability exists in the UPnP component of TL-WR841N v14, where improper input validation leads to an out-of-bounds read, potentially causing a crash…
CVE-2026-3227 - CVSS 8.5 (high), 2026-03-16: A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements…
CVE-2025-9014 - CVSS 7.5 (high), 2026-01-15: A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation. …
CVE-2025-9377 - CVSS 8.6 (high), 2025-08-29: The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9. This…
CVE-2025-53714 - CVSS 7.5 (high), 2025-07-29: A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WzdWlanSiteSurveyRpm_AP.htm file due to missing input…
CVE-2025-53713 - CVSS 7.5 (high), 2025-07-29: A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_APC.htm file due to missing input parameter…
CVE-2025-53715 - CVSS 7.5 (high), 2025-07-29: A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/Wan6to4TunnelCfgRpm.htm file due to missing input parameter…
CVE-2025-53711 - CVSS 7.5 (high), 2025-07-29: A vulnerability has been found in TP-Link TL-WR841N v11, TL-WR842ND v2 and TL-WR494N v3. The vulnerability exists in the /userRpm/WlanNetworkRpm.htm file due…
CVE-2025-53712 - CVSS 7.5 (high), 2025-07-29: A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_AP.htm file due to missing input parameter…
CVE-2023-50224 - CVSS 6.5 (medium), 2024-05-03: TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose…
CVE-2023-39471 - CVSS 8.8 (high), 2024-05-03: TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary…
CVE-2023-36489 - CVSS 8.8 (high), 2023-09-06: Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows:…
CVE-2023-36357 - CVSS 7.7 (high), 2023-06-22: An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial…
CVE-2023-36356 - CVSS 7.7 (high), 2023-06-22: TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component…
CVE-2023-36359 - CVSS 7.5 (high), 2023-06-22: TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component…
CVE-2023-36354 - CVSS 7.5 (high), 2023-06-22: TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component…
CVE-2023-36358 - CVSS 7.7 (high), 2023-06-22: TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component…
CVE-2023-33537 - CVSS 8.1 (high), 2023-06-07: TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/FixMapCfgRpm.
CVE-2023-33536 - CVSS 8.1 (high), 2023-06-07: TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/WlanMacFilterRpm.
CVE-2023-33538 - CVSS 8.8 (high), 2023-06-07: TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component…
CVE-2022-46912 - CVSS 8.8 (high), 2022-12-20: An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to execute arbitrary code or cause a Denial…
CVE-2022-42202 - CVSS 6.1 (medium), 2022-10-18: TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting (XSS).
CVE-2022-30024 - CVSS 8.8 (high), 2022-07-14: A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary…
CVE-2022-25073 - CVSS 9.8 (critical), 2022-02-24: TL-WR841Nv14_US_0.9.1_4.18 routers were discovered to contain a stack overflow in the function dm_fillObjByStr(). This vulnerability allows unauthenticated…
CVE-2022-0162 - CVSS 9.8 (critical), 2022-02-09: The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication information in…
CVE-2020-35576 - CVSS 8.8 (high), 2021-01-26: A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticated users to execute…
CVE-2020-8423 - CVSS 7.2 (high), 2020-04-02: A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary…
CVE-2019-17147 - CVSS 8.8 (high), 2020-01-07: This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to…
CVE-2018-12575 - CVSS 9.8 (critical), 2018-07-02: On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of…
CVE-2018-12574 - CVSS 8.8 (high), 2018-07-02: CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices.
CVE-2018-12577 - CVSS 8.8 (high), 2018-07-02: The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command…
CVE-2018-12576 - CVSS 4.3 (medium), 2018-07-02: TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking.
CVE-2018-11714 - CVSS 9.8 (critical), 2018-06-04: An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622…
CVE-2015-3035 - CVSS 7.5 (high), 2015-04-22: Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware…
CVE-2012-6316 - CVSS 4.3 (medium), 2014-09-30: Multiple cross-site scripting (XSS) vulnerabilities in the TP-LINK TL-WR841N router with firmware 3.13.9 Build 120201 Rel.54965n and earlier allow remote…
CVE-2012-6276 - CVSS 4.3 (medium), 2013-01-26: Directory traversal vulnerability in the web-based management interface on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and…
CVE-2012-5687 - CVSS 7.8 (high), 2012-11-01: Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier…