What’s Vulnerable › Vulnerabilities

CVE-2023-39747

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-08-21 · updated 2026-06-17
• Weakness: CWE-120

Description

TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm.

Affected products

• TP-Link Tl-Wr841N V8 Firmware: all versions
• TP-Link Tl-Wr940N V2 Firmware: all versions
• TP-Link Tl-Wr941Nd V5 Firmware: all versions

References

• https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/17/TP-Link%20WR841N%20wireless%20router%20WlanSecurityRpm%20Stack%20Overflow%20vulnerability.md
• https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/17/TP-Link%20WR841N%20wireless%20router%20WlanSecurityRpm%20Stack%20Overflow%20vulnerability.md

Get alerted when CVE-2023-39747 or the next vulnerability affects your stack