Vulnerability intelligence
CVE-2023-33538
TP-Link Multiple Routers Command Injection Vulnerability
TP-Link Multiple Routers
TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm .
CVSS Score
8.8
High
EPSS — Exploit Probability
42%
Riskier than 99% of all CVEs
Exploitation
Confirmed in the wild
Used in ransomware campaigns
Remediation
unknown
Federal deadline 2025-07-07
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2025-07-07.
3 articles across 3 outlets · first covered Apr 19, 2026 · latest Apr 20, 2026
Tracked incidents
Coverage timeline
-
CVE-2023-33538 under attack for a year, but exploitation still unsuccessfulsecurityaffairs.com · Apr 20, 2026
-
Hackers Probe TP Link Routers for CVE-2023-33538, No Success Yetwww.securityweek.com · Apr 20, 2026
-
Nexcorium hijacks TBK DVRs via CVE-2024-3721 for DDoS botnetthehackernews.com · Apr 19, 2026