TP-Link Tl-WR710N Firmware vulnerabilities

3 CVEs affecting TP-Link Tl-WR710N Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-50224, published 2024-05-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-50224: TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability, published 2024-05-03. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2025-09-03. EPSS: 20% chance of exploitation in the next 30 days. TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected…
CVE-2022-4498, published 2023-01-11. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow.…
CVE-2022-4499, published 2023-01-11. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is susceptible to a side-channel attack. By measuring the response…