CVE-2020-8423: TP-Link TL-WR841N Firmware

High severity, CVSS 7.2. EPSS: 9.3% chance of exploitation in the next 30 days.

A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the configuration of the Wi-Fi network.

Affected products

• TP-Link TL-WR841N Firmware: version 3.16.9 only

Published 2020-04-02. Last modified 2026-06-17.