TP-Link Tl-WR841ND Firmware vulnerabilities

7 CVEs affecting TP-Link Tl-WR841ND Firmware, 3 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9377, published 2025-08-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-3035: TP-Link Multiple Archer Devices Directory Traversal Vulnerability, published 2015-04-22. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 83.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500…
CVE-2025-9377: TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability, published 2025-08-29. High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2025-09-03. EPSS: 37.7% chance of exploitation in the next 30 days. The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9. This issue affects Archer C7(EU) V2: before…
CVE-2023-50224: TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability, published 2024-05-03. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2025-09-03. EPSS: 20% chance of exploitation in the next 30 days. TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected…
CVE-2024-9284, published 2024-09-27. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in TP-LINK TL-WR841ND up to 20240920. It has been rated as critical. Affected by this issue is some unknown functionality of the file /userRpm/popupSiteSurveyRpm.htm. The…
CVE-2025-25901, published 2025-02-13. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11, triggered by the dnsserver1 and dnsserver2 parameters at /userRpm/WanSlaacCfgRpm.htm. This vulnerability allows attackers to…
CVE-2025-25898, published 2025-02-13. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the pskSecret parameter at /userRpm/WlanSecurityRpm.htm. This vulnerability allows attackers to cause a Denial of Service…
CVE-2025-25897, published 2025-02-13. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'ip' parameter at /userRpm/WanStaticIpV6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service…