PT-2019-3604 · Tp Link · Tp-Link Tl-Wr1043Nd

Malfuzzer · Published 2019-06-19 · Updated 2020-08-24 · CVE-2019-6971

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR1043ND version V2

Description The issue is related to the web interface management of the TP-Link TL-WR1043ND router's firmware, specifically with the authentication procedure. An attacker can exploit this by sending a specially crafted cookie in an HTTP authentication packet to the router management web interface, allowing full control of the router without needing credentials. This can be done remotely.

Recommendations For TP-Link TL-WR1043ND version V2, as a temporary workaround, consider restricting access to the router management web interface until a patch is available. Avoid using the web interface for critical operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2019-03815

CVE-2019-6971

Affected Products

Tp-Link Tl-Wr1043Nd

References · 7

• 🔥 https://github.com/MalFuzzer/Vulnerability-Research/blob/master/TL-WR1043ND%20V2%20-%20TP-LINK/TL-WR1043ND_PoC.pdf · Exploit
• 🔥 https://exploit-db.com/exploits/47483 · Exploit
• 🔥 https://twitter.com/MalFuzzer/status/1141269335685652480?s=19 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-6971 · Security Note
• https://bdu.fstec.ru/vul/2019-03815 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6971 · Vendor Advisory
• https://exploit.kitploit.com/2019/10/tp-link-tl-wr1043nd-2-authentication.html · Note