PT-2017-18939 · Tp Link · Tp-Link Wr841N

Publicado 2017-06-26 · Atualizado 2017-07-06 · CVE-2017-9466

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link WR841N V8 router versions prior to TL-WR841N(UN) V8 170210

Description The issue is related to a design flaw in the use of DES for block encryption in the httpd executable. This flaw resulted in incorrect access control, allowing attackers to gain read-write access to system settings through the protected router configuration service tddp via the LAN and Ath0 (Wi-Fi) interfaces.

Recommendations For TP-Link WR841N V8 router versions prior to TL-WR841N(UN) V8 170210, update to version TL-WR841N(UN) V8 170210 or later to resolve the issue.

Exploit

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

Identificadores relacionados

CVE-2017-9466

Produtos afetados

Tp-Link Wr841N

Referências · 3

• 🔥 http://blog.senr.io/blog/cve-2017-9466-why-is-my-router-blinking-morse-code · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-9466 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-9466 · Aviso do Fabricante