TP-Link security briefs
3 published alerts for TP-Link products and services.
TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability
TP-Link Multiple Routers is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-9377). TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. CISA remediation due date: 2025-09-24. If you need help checking exposure, call (864) 335-9223.
TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
TP-Link TL-WR841N is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2023-50224). TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. CISA remediation due date: 2025-09-24. If you need help checking exposure, call (864) 335-9223.
TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability
TP-Link TL-WA855RE is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2020-24363). TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. CISA remediation due date: 2025-09-23. If you need help checking exposure, call (864) 335-9223.