CVE-2023-39747

9.8 criticalEPSS 8.7%

Critical (9.8) in tp-link. EPSS 8.7% chance of exploitation in the next 30 days.

TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 8.7% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2023-08-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tp-link:tl-wr841n_v8_firmware
tp-link:tl-wr940n_v2_firmware
tp-link:tl-wr941nd_v5_firmware

References

https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/17/TP-Link%20WR841N%20wireless%20router%20WlanSecurityRpm%20Stack%20Overflow%20vulnerability.md
https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/17/TP-Link%20WR841N%20wireless%20router%20WlanSecurityRpm%20Stack%20Overflow%20vulnerability.md

Check your stack JSON