U.S. CISA adds TP-Link Archer C7(EU) and TL-WR841N flaws to its Known Exploited Vulnerabilities catalog

According to U.S. Cybersecurity and Infrastructure Security Agency (CISA), TP-Link Archer C7(EU) and TL-WR841N flaws have been added to its Known Exploited Vulnerabilities (KEV) catalog. The entry describes two CVEs: CVE-2023-50224, a TP-Link TL-WR841N Authentication Bypass by Spoofing vulnerability with a CVSS score of 6.5, and CVE-2025-9377, an authenticated RCE flaw affecting TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9, with a CVSS score of 8.6.

CVE-2023-50224 is a dropbearpwd Improper Authentication Information Disclosure vulnerability in the httpd service that allows unauthenticated, network-adjacent attackers to disclose stored credentials. The advisory notes that both devices are End of Life and that customers should replace them or apply the patch. CISA also requires that FCEB agencies address the vulnerabilities by the due date under Binding Operational Directive (BOD) 22-01, with private organisations urged to review the KEV Catalog and take action. The article states the fix deadline for federal agencies is 24 September 2025.