Deviceways

Router

TP-LINK TL-WR841N

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1.5 · Atheros AR2122 / Atheros AR5416 Wi-Fi
Processor: Atheros AR7130 · Wi-Fi chip: Atheros AR2122 · Wi-Fi chip: Atheros AR5416Open hardware record
v10 · Qualcomm Atheros QCA9533
Open hardware record
v11.x · Qualcomm Atheros QCA9533
Open hardware record
v12 · Qualcomm Atheros QCA9533
Open hardware record
v13.x · MediaTek MT7628NN
Open hardware record
v14.x · MediaTek MT7628NN
Open hardware record
v3.0 · Atheros AR9102 Wi-Fi
Processor: Atheros AR9130Open hardware record
v5 · Atheros AR9280 Wi-Fi
Processor: Atheros AR7240Open hardware record
v7.1 · Atheros AR9287 Wi-Fi
Processor: Atheros AR7241Open hardware record
v8.x · Atheros AR9341
Open hardware record
v9.x · Qualcomm Atheros QCA9533
Open hardware record
v13 · MediaTek MT7628N Wi-Fi
Get OpenWrt firmware Release listed · 25.12.6
v14 · MediaTek MT7628NN Wi-Fi
Retired support documentedOpen device guide
v13 · MediaTek MT7628N
Open hardware record Release listed · 25.12.5
v14 · MediaTek MT7628NN
Open hardware record
v9.2 · Qualcomm Atheros QCA9533
Open hardware record
Original project github.com

v13 · MediaTek MT7628N Wi-Fi

First installation
U-Boot TFTP recovery

v14 · MediaTek MT7628NN Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

tp-link tl-wr841n v13 — device documentation (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
v13

Device details

tp-link tl-wr841n v14 — device documentation (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
v14

Device details

TP-LINK TL-WR841N (RO) v11 — TechInfoDepot (github.com)TP-LINK TL-WR841N(D) v11.x — TechInfoDepot (github.com)TP-LINK TL-WR841N v11.x — WikiDevi (github.com)

Hardware revision
v11.x

Device details

TP-LINK TL-WR841N v1.5 — TechInfoDepot (github.com)

Hardware revision
v1.5

Device details

TP-LINK TL-WR841N v11.x — TechInfoDepot (github.com)TP-LINK TL-WR841N(D) v11 — TechInfoDepot (github.com)

Hardware revision
v11.x

Device details

TP-LINK TL-WR841N v13.x — TechInfoDepot (github.com)

Hardware revision
v13.x

Device details

TP-LINK TL-WR841N v14.x — TechInfoDepot (github.com)

Hardware revision
v14.x

Device details

TP-LINK TL-WR841N v7.x — TechInfoDepot (github.com)

Hardware revision
v7.1

Device details

TP-LINK TL-WR841N(D) v10 — TechInfoDepot (github.com)

Hardware revision
v10

Device details

TP-LINK TL-WR841N(D) v12 — TechInfoDepot (github.com)

Hardware revision
v12

Device details

TP-LINK TL-WR841N(D) v3 — TechInfoDepot (github.com)

Hardware revision
v3.0

Device details

TP-LINK TL-WR841N(D) v5 — TechInfoDepot (github.com)

Hardware revision
v5

Device details

TP-LINK TL-WR841N(D) v8.x — TechInfoDepot (github.com)

Hardware revision
v8.x

Device details

TP-LINK TL-WR841N(D) v9.2 — TechInfoDepot (github.com)

Hardware revision
v9.2

Device details

TP-LINK TL-WR841N(D) v9.x — TechInfoDepot (github.com)

Hardware revision
v9.x

Device details

TP-LINK TL-WR841N (RO) v11 — WikiDevi (github.com)

Hardware revision
(RO) v11.x

Device details

TP-LINK TL-WR841N v1.5 — WikiDevi (github.com)

Hardware revision
v1.5

Device details

TP-LINK TL-WR841N v10.x — WikiDevi (github.com)

Hardware revision
v10.x

Device details

TP-LINK TL-WR841N v13.x — WikiDevi (github.com)

Hardware revision
v13.x

Device details

TP-LINK TL-WR841N v7.x — WikiDevi (github.com)

Hardware revision
v7.1

Device details

TP-LINK TL-WR841N v8.x — WikiDevi (github.com)

Hardware revision
v8.x

OpenWrt · v13 · MediaTek MT7628N Wi-Fi

OpenWrt · v13 · MediaTek MT7628N Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
U-Boot TFTP recovery
Recovery routes recorded
U-Boot TFTP recovery
Availability recorded by source
Discontinued

OpenWrt · v14 · MediaTek MT7628NN Wi-Fi

OpenWrt · v14 · MediaTek MT7628NN Wi-Fi — Source documentation (openwrt.org)

Availability recorded by source
Available 2019

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

Listed in CISA KEV ↗CVSS 8.8 (v3.1)

TP-LINK TL-WR841N

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm .

CVE-2023-33538

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm .

CVE-2023-33538 record (secpod.com) ↗
CVE published

Listed in CISA KEV ↗CVSS 7.5 (v3.1)

TP-LINK TL-WR841N

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0),…

CVE-2015-3035

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

CVE published

Listed in CISA KEV ↗CVSS 6.5 (v3.1)

TL-WR841N

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability

CVE-2023-50224

Affected firmware
3.16.9 build 200409 V8 V9 V10 V11 V12
Fix
Fix details in the linked record
Unaffected versions
V11_211209; V12_230317
Read zdi CVE record
Details and sources
Public disclosure CVE updated

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

ZDI-23-1808 — TL-WR841N (zerodayinitiative.com) ↗vendor-provided URL — TL-WR841N (tp-link.com) ↗vendor-advisory — TL-WR841N (tp-link.com) ↗
CVE published

CVSS 8.8 (v3.1)

TP-LINK TL-WR841N

An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via…

CVE-2022-46912

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

An issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.

CVE published

CVSS 8.8 (v3.0)

TL-WR841N

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers

CVE-2019-17147

Affected firmware
0.9.1 4.16 v007c.0 Build 180613 Rel.42415n
Fix
Fix details in the linked record
Read zdi CVE record
Details and sources
CVE updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 80 by default. When parsing the Host request header, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length static buffer. An attacker can leverage this vulnerability to execute code in the context of the admin user. Was ZDI-CAN-8457.

Security advisory ZDI 19 992 — TL-WR841N (zerodayinitiative.com) ↗
Check more security advisories for this device · CVE.org