Deviceways

Router

TP-LINK TL-WR941ND

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v2 · Atheros AR9132 Wi-Fi
Retired support documentedOpen device guide
v3.2 · Atheros AR9132
Open hardware record
v4 · Atheros AR9283 Wi-Fi
Retired support documentedProcessor: Atheros AR7240Open device guide
v5 · Atheros AR9341 Wi-Fi
Retired support documentedOpen device guide
v6 · Qualcomm Atheros QCA9561 Wi-Fi
Retired support documentedProcessor: Qualcomm Atheros TP9343Open device guide
v3 / v3.2 · Atheros AR9132 Wi-Fi
Retired support documentedOpen device guide
v2 · Atheros AR9132
Open hardware record
v3 · Atheros AR9132
Open hardware record
v4 · Atheros AR7240
Open hardware record
v5 · Atheros AR9341
Open hardware record
v6
Open hardware record
Original project github.com

v2 · Atheros AR9132 Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.
First installation
GUI OEM; U-Boot TFTP recovery; U-Boot TFTP + serial recovery

v3 / v3.2 · Atheros AR9132 Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.
First installation
GUI OEM; U-Boot TFTP recovery; U-Boot TFTP + serial recovery

v4 · Atheros AR9283 Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.
First installation
GUI OEM; U-Boot TFTP recovery; U-Boot TFTP + serial recovery

v5 · Atheros AR9341 Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.
First installation
GUI OEM; U-Boot TFTP recovery; U-Boot TFTP + serial recovery

v6 · Qualcomm Atheros QCA9561 Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.
First installation
GUI OEM; U-Boot TFTP recovery; U-Boot TFTP + serial recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

tp-link tl-wr941nd v2 — device documentation (github.com)

Hardware revision
v2

Device details

tp-link tl-wr941nd v3.2 — device documentation (github.com)

Hardware revision
v3.2

Device details

tp-link tl-wr941nd v3 — device documentation (github.com)

Hardware revision
v3

Device details

tp-link tl-wr941nd v4 — device documentation (github.com)

Hardware revision
v4

Device details

tp-link tl-wr941nd v5 — device documentation (github.com)

Hardware revision
v5

Device details

tp-link tl-wr941nd v6 — device documentation (github.com)

Hardware revision
v6

Device details

TP-LINK TL-WR941ND v1.0 — WikiDevi (github.com)

Hardware revision
v1.0

Device details

TP-LINK TL-WR941ND v2.x — WikiDevi (github.com)

Hardware revision
v2.0

Device details

TP-LINK TL-WR941ND v3.x — WikiDevi (github.com)

Hardware revision
v3.x

Device details

TP-LINK TL-WR941ND v4.x — WikiDevi (github.com)

Hardware revision
v4.x

Device details

TP-LINK TL-WR941ND v5.x — WikiDevi (github.com)

Hardware revision
v5.x

Device details

TP-LINK TL-WR941ND v6.x — WikiDevi (github.com)

Hardware revision
v6.x

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
v2

OpenWrt · v2 · Atheros AR9132 Wi-Fi

OpenWrt · v2 · Atheros AR9132 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, U-Boot TFTP recovery, U-Boot TFTP + serial recovery
Recovery routes recorded
U-Boot TFTP recovery, U-Boot TFTP + serial recovery
Availability recorded by source
Discontinued

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
v3 / v3.2

OpenWrt · v3 / v3.2 · Atheros AR9132 Wi-Fi

OpenWrt · v3 / v3.2 · Atheros AR9132 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, U-Boot TFTP recovery, U-Boot TFTP + serial recovery
Recovery routes recorded
U-Boot TFTP recovery, U-Boot TFTP + serial recovery
Availability recorded by source
Discontinued

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
v4

OpenWrt · v4 · Atheros AR9283 Wi-Fi

OpenWrt · v4 · Atheros AR9283 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, U-Boot TFTP recovery, U-Boot TFTP + serial recovery
Recovery routes recorded
U-Boot TFTP recovery, U-Boot TFTP + serial recovery
Availability recorded by source
Discontinued

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
v5

OpenWrt · v5 · Atheros AR9341 Wi-Fi

OpenWrt · v5 · Atheros AR9341 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, U-Boot TFTP recovery, U-Boot TFTP + serial recovery
Recovery routes recorded
U-Boot TFTP recovery, U-Boot TFTP + serial recovery
Availability recorded by source
Discontinued 2016

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
v6

OpenWrt · v6 · Qualcomm Atheros QCA9561 Wi-Fi

OpenWrt · v6 · Qualcomm Atheros QCA9561 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, U-Boot TFTP recovery, U-Boot TFTP + serial recovery

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

Listed in CISA KEV ↗CVSS 6.5 (v3.1)

TL-WR941ND

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability

CVE-2023-50224

Affected firmware
V5 V6
Fix
Fix details in the linked record
Unaffected versions
V6_220610
Read zdi CVE record
Details and sources
Public disclosure CVE updated

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

ZDI-23-1808 — TL-WR941ND (zerodayinitiative.com) ↗vendor-provided URL — TL-WR941ND (tp-link.com) ↗vendor-advisory — TL-WR941ND (tp-link.com) ↗
CVE published

CVSS 8.8 (v3.1)

TP-LINK TL-WR941ND

An issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 and TL-WR941ND V4 up to 3.12.8 allows attackers to execute arbitrary code or cause a Denial of Service…

CVE-2022-46435

Affected firmware
TL-WR941ND V4: up to 3.12.8
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

An issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 and TL-WR941ND V4 up to 3.12.8 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.

CVE published

CVSS 7.7 (v3.1)

TP-LINK TL-WR941ND

TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm

CVE-2023-36358

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

CVE published

CVSS 7.5 (v3.1)

TP-LINK TL-WR941ND

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm

CVE-2023-36359

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

CVE published

TP-LINK TL-WR941ND

TP-Link TL-WR941ND V6 were discovered to contain a buffer overflow via the pSize parameter at /userRpm/PingIframeRpm.

CVE-2023-39751

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

TP-Link TL-WR941ND V6 were discovered to contain a buffer overflow via the pSize parameter at /userRpm/PingIframeRpm.

Check more security advisories for this device · CVE.org