VYPR
← All advisories
High severity8.8NVD Advisory· Published May 3, 2024· Updated Jun 17, 2026

CVE-2023-39471

CVE-2023-39471

Description

TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the ated_tp service. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21825.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • TP-Link/Tl Wr840n Firmware
    cpe:2.3:o:tp-link:tl-wr840n_firmware:*:*:*:*:*:*:*:*
    Range: <231121
  • TP-Link/Tl Wr841n3 versions
    cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*range: <231119
    • (no CPE)
    • (no CPE)range: 4.19

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.