Actively exploited vulnerabilities affecting TP-Link products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2023-50224https://wildfortech.com/security#CVE-2023-50224The TP-Link TL-WR841N router contains a flaw in its built-in web server (httpd) that allows an attacker to bypass authentication through spoofing, potentially exposing credentials stored on the device. Because this service listens on TCP port 80 by default, the attack surface is the router's standard management interface. This is especially concerning because the device may be at end-of-life, meaning no vendor-supported fix is likely forthcoming.Wed, 03 Sep 2025 00:00:00 GMTTP-LinkTL-WR841Nhttps://wildfortech.com/security#CVE-2025-9377https://wildfortech.com/security#CVE-2025-9377TP-Link Archer C7(EU) and TL-WR841N/ND(MS) routers contain an OS command injection flaw in the Parental Control page, meaning an attacker who can reach that interface could execute arbitrary operating system commands on the device. Because these products are likely end-of-life or end-of-service, TP-Link may not issue a patch, leaving the vulnerability permanently unresolved. Compromised routers can be used to intercept traffic, pivot into internal networks, or join botnets.Wed, 03 Sep 2025 00:00:00 GMTTP-LinkMultiple Routershttps://wildfortech.com/security#CVE-2020-24363https://wildfortech.com/security#CVE-2020-24363This vulnerability in the TP-Link TL-WA855RE range extender allows anyone on the same network to send an unauthenticated request that factory-resets the device. Once reset, an attacker can set a new admin password and take full control. Because no login is required to trigger the reset, any network user — or attacker who has gained local network access — can effectively seize administrative ownership of the device, disrupting connectivity and potentially pivoting further into the network.Tue, 02 Sep 2025 00:00:00 GMTTP-LinkTL-WA855REhttps://wildfortech.com/security#CVE-2023-33538https://wildfortech.com/security#CVE-2023-33538Several older TP-Link routers contain a command injection flaw in their wireless network management interface, allowing an attacker to execute arbitrary operating system commands on the device. Because these models are likely end-of-life or end-of-service, TP-Link is not expected to release patches. A compromised router gives attackers a foothold into every device on that network, making this a serious threat for any organization still running this aging hardware.Mon, 16 Jun 2025 00:00:00 GMTTP-LinkMultiple Routers