PT-2016-4493 · Tp Link · Tp-Link Devices

Amitay Dan · Published 2016-10-06 · Updated 2018-04-13 · CVE-2016-1000009

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions TP-LINK devices (affected versions not specified)

Description The issue concerns TP-LINK's loss of control over two domains, www.tplinklogin.net and tplinkextender.net, which are physically printed on many of their devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2016-1000009

Affected Products

Tp-Link Devices

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-1000009 · Security Note
• http://seclists.org/bugtraq/2016/Jul/3 · Note
• https://pbs.twimg.com/media/CmnQ3F0WIAAs_X0.jpg · Note
• https://pbs.twimg.com/media/CmnQGI0WAAIbPHA.jpg · Note