Replacement firmware
- v1 · Atheros AR9287 Wi-Fi
- Browse firmware downloads Beta build · 10-13-2026-r66345
- v2 · Atheros AR9341 Wi-Fi
- Browse firmware downloads Beta build · 10-13-2026-r66345
Router
TP-LINK TL-WR842ND
Projects for this device
Replacement firmware
Replace router software with a customizable system for network controls and community packages.
How to get started
Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.
- Setup
- Firmware replacement; route varies by router
- You’ll need
- Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
- v1.x · Atheros AR9287 Wi-Fi
- Processor: Atheros AR7241Open hardware record
- v2.x · Atheros AR9341
- Open hardware record
- v1 · Atheros AR9287 Wi-Fi; v2 · Atheros AR9341 Wi-Fi
- Retired support documentedOpen device guide
- v1 · Atheros AR7241
- Open hardware record
- v2 · Atheros AR9341
- Open hardware record
v1 · Atheros AR9287 Wi-Fi
- Device support in source
- Retired; check the documented hardware and older release resources.
- First installation
- GUI OEM; U-Boot TFTP recovery
v2 · Atheros AR9341 Wi-Fi
- Device support in source
- Retired; check the documented hardware and older release resources.
- First installation
- GUI OEM; U-Boot TFTP recovery; U-Boot TFTP + serial recovery
Features & details
Check the project and hardware shown for each feature.
Device details
tp-link tl-wr842nd v1 — device documentation (github.com)Device details — Source documentation (openwrt.org)
- Hardware revision
- v1
Device details
tp-link tl-wr842nd v2 — device documentation (github.com)Device details — Source documentation (openwrt.org)
- Hardware revision
- v2
Device details
- Hardware revision
- v1.x
Device details
- Hardware revision
- v2.x
Device details
- Hardware revision
- v1.x
Device details
- Hardware revision
- v2.x
OpenWrt · v1 · Atheros AR9287 Wi-Fi
OpenWrt · v1 · Atheros AR9287 Wi-Fi — Source documentation (openwrt.org)
- Installation routes recorded
- GUI OEM, U-Boot TFTP recovery
- Recovery routes recorded
- U-Boot TFTP recovery
- Availability recorded by source
- Discontinued
OpenWrt · v2 · Atheros AR9341 Wi-Fi
OpenWrt · v2 · Atheros AR9341 Wi-Fi — Source documentation (openwrt.org)
- Installation routes recorded
- GUI OEM, U-Boot TFTP recovery, U-Boot TFTP + serial recovery
- Recovery routes recorded
- U-Boot TFTP recovery, U-Boot TFTP + serial recovery
- Availability recorded by source
- Discontinued 2016
Hardware differences
v1.x · Atheros AR9287 Wi-Fi
- Flash chip
- Spansion S25FL064PIF
- Processor
- Atheros AR7241
- Memory chip
- Zentel A3S56D40FTP-G5
v2.x · Atheros AR9341
- Flash chip
- Winbond W25Q64FVSIG
- Memory chip
- Winbond W9425G6JH-5
Security
Saved scan
From our saved security research.
Model advisories
Selected highlightsPrioritized by known exploitation, severity, then date.
TL-WR842ND
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
- Affected firmware
- V2 V3 V4
- Fix
- Fix details in the linked record
Details and sources
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.
TL-WR842ND v2
TP-Link TL-WR841N, TL-WR842ND and TL-WR949N WlanNetworkRpm.htm buffer overflow
- Affected firmware
- Through V2_150514
- Fix
- This vulnerability only affects products that are no longer supported by the maintainer.
Details and sources
A vulnerability has been found in TP-Link TL-WR841N v11, TL-WR842ND v2 and TL-WR494N v3. The vulnerability exists in the /userRpm/WlanNetworkRpm.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.