PT-2017-18939 · Tp Link · Tp-Link Wr841N

Published 2017-06-26 · Updated 2017-07-06 · CVE-2017-9466

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link WR841N V8 router versions prior to TL-WR841N(UN) V8 170210

Description The issue is related to a design flaw in the use of DES for block encryption in the httpd executable. This flaw resulted in incorrect access control, allowing attackers to gain read-write access to system settings through the protected router configuration service tddp via the LAN and Ath0 (Wi-Fi) interfaces.

Recommendations For TP-Link WR841N V8 router versions prior to TL-WR841N(UN) V8 170210, update to version TL-WR841N(UN) V8 170210 or later to resolve the issue.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2017-9466

Affected Products

Tp-Link Wr841N

References · 3

• 🔥 http://blog.senr.io/blog/cve-2017-9466-why-is-my-router-blinking-morse-code · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-9466 · Security Note
• https://osv.dev/vulnerability/CVE-2017-9466 · Vendor Advisory