TP-Link Tl-WR902AC Firmware vulnerabilities

6 CVEs affecting TP-Link Tl-WR902AC Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-50225, published 2024-05-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-50224: TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability, published 2024-05-03. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2025-09-03. EPSS: 20% chance of exploitation in the next 30 days. TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected…
CVE-2022-48194, published 2022-12-30. High severity, CVSS 8.8. EPSS: 33.5% chance of exploitation in the next 30 days. TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the…
CVE-2022-25074, published 2022-02-24. Critical severity, CVSS 9.8. EPSS: 13% chance of exploitation in the next 30 days. TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability allows unauthenticated attackers to execute arbitrary code.
CVE-2023-44447, published 2024-05-03. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected…
CVE-2023-36489, published 2023-09-06. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to…
CVE-2023-50225, published 2024-05-03. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. TP-Link TL-WR902AC dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…