PT-2019-12691 · Tp Link · Tp-Link Tl-Wr840N

Published 2019-05-24 · Updated 2019-05-29 · CVE-2019-12195

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR840N version 5 00000005

Description The issue allows for cross-site scripting (XSS) attacks via the network name. An attacker must first gain access to the router by cracking the password and logging into the admin page. Once access is gained, an XSS payload can be used to automatically change the network name, resulting in the disconnection of the internet connection for all users.

Recommendations For TP-Link TL-WR840N version 5 00000005, consider changing the default password to a strong and unique one to prevent unauthorized access, and avoid using the network name field for any potentially malicious input until a fix is available. As a temporary workaround, restrict access to the admin login page to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-12195

Affected Products

Tp-Link Tl-Wr840N

References · 5

• 🔥 https://exploit-db.com/exploits/46882 · Exploit
• https://tp-link.com/us/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12195 · Security Note
• https://osv.dev/vulnerability/CVE-2019-12195 · Vendor Advisory
• http://packetstormsecurity.com/files/153027/TP-LINK-TL-WR840N-Cross-Site-Scripting.html · Note