A Deep Dive Into Attempted Exploitation of CVE-2023-33538

This report details an ongoing attempt to exploit CVE-2023-33538, a vulnerability in older TP-Link Wi-Fi router models (TL-WR940N v2/v4, TL-WR740N v1/v2, TL-WR841N v8/v10). Automated scans, utilizing Mirai-like malware payloads, were detected after the vulnerability was added to the CISA’s KEV Catalog. The analysis con…