CVE-2022-30024
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware 3.16.9) allows an authenticated remote attacker to execute arbitrary code via a GET request to the System Tools page of the Wi-Fi network. This also affects versions V11 and V10.
Risk Assessment
An attacker can take control of the router, leading to breach of confidentiality and integrity of network traffic and potential attacks on other devices in the local network.
Recommendation
Immediately update the router firmware to the latest available version and restrict access to the administration panel to trusted IP addresses only.
Other vulnerabilities in TP-Link TL-WR841N
See all- CVE-2026-5039High
TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from default web management credentials, making the key predictable if the device is left in default configuration.
- CVE-2025-9014High
A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation. A remote, unauthenticated attacker can exploit this flaw and cause Denial of Service on the web portal service. This issue affects TL-WR841N v14 before version 250908.
- CVE-2026-76651Medium
A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data requests. Insufficient validation of an attacker-controlled boundary parameter may allow a remote unauthenticated attacker to submit a crafted request that corrupts memory by overwriting data beyond the bounds of an internal buffer.
- CVE-2026-76650Medium
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service.
- CVE-2026-76649Medium
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly.
- CVE-2026-9105Medium
A stack-based buffer overflow vulnerability in the web management interface of TP-Link TL-WR841N v14 allows an authenticated remote attacker to crash the device by sending a crafted HTTP request. Successful exploitation leads to a denial-of-service condition, causing the device to crash and automatically reboot.
Original NVD description (English source)
A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841N(EU)_V12_160624 and TL-WR841 V11 TL-WR841N(EU)_V11_160325 , TL-WR841N_V11_150616 and TL-WR841 V10 TL-WR841N_V10_150310 are also affected.