This vulnerability affects TP-Link TL-WR850N v3 routers by storing sensitive administrative and Wi-Fi credentials in cleartext within the device's flash memory. The serial interface, which remains enabled and protected by weak authentication, can be accessed physically to retrieve these credentials. An attacker with physical access and serial port connection can recover the router’s management password and wireless network key, potentially gaining full administrative control and unauthorized network access. The CVSS 4.0 vector indicates the attack requires physical access (AV:P), low attack complexity (AC:L), no user interaction (UI:N), and high impact on confidentiality (VC:H).

An attacker with physical access to the device and the ability to connect to the serial interface can extract cleartext administrative and Wi-Fi credentials. This leads to full administrative control of the router and unauthorized access to the associated wireless network. There are no known exploits in the wild at this time.

No official patch or remediation is currently available for this vulnerability. Since the attack requires physical access and serial port connectivity, restricting physical access to the device and disabling or securing the serial interface (if possible) are recommended interim mitigations. Monitor the vendor’s advisory channels for any future updates or patches addressing this issue.