CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited

🗓️ 04 Sep 2025 10:03:00Reported by The Hacker NewsType

CISA lists two TP-Link router flaws in KEV: CVE-2023-50224 authentication bypass and CVE-2025-9377 remote code execution.

Reporter	Title	Published	Views	Family All 45
BDU FSTEC	The vulnerability of the dropbearpwd component in the TP-Link TL-WR841N router’s microprogramming software allows a intruder to gain unauthorized access to protected information.	25 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web interfaces of TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9 software-defined routers allows a hacker to execute arbitrary commands.	5 Sep 202500:00	–	bdu_fstec
Circl	CVE-2020-24363	13 Mar 202117:04	–	circl
Circl	CVE-2023-50224	22 Aug 202521:02	–	circl
Circl	CVE-2025-9377	3 Sep 202520:03	–	circl
CISA KEV Catalog	TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability	2 Sep 202500:00	–	cisa_kev
CISA KEV Catalog	TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability	3 Sep 202500:00	–	cisa_kev
CISA KEV Catalog	TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability	3 Sep 202500:00	–	cisa_kev
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	3 Sep 202512:00	–	cisa
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	2 Sep 202512:00	–	cisa

04 Sep 2025 10:03Current

7.8High risk

Vulners AI Score7.8

CVSS 28.3

CVSS 3.18.8

CVSS 36.5

CVSS 48.6

EPSS0.20689