PT-2021-11958 · Tp Link · Tp-Link Tl-Wr840N

Therealunicornsecurity · Published 2021-01-06 · Updated 2021-01-12 · CVE-2020-36178

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR840N version 6 EU 0.9.1 4.16

Description: The issue allows OS command injection because a raw string entered from the web interface (an IP address field) is used directly for a call to the system library function (for iptables). This is specifically related to the oal ipt addBridgeIsolationRules function, which is not the only function that calls util execSystem.

Recommendations: For TP-Link TL-WR840N version 6 EU 0.9.1 4.16, consider disabling the oal ipt addBridgeIsolationRules function until a patch is available to prevent OS command injection. Restrict access to the IP address field in the web interface to minimize the risk of exploitation. Avoid using the IP address field in the affected web interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2020-36178

Affected Products

Tp-Link Tl-Wr840N

References · 11

• 🔥 https://github.com/therealunicornsecurity/therealunicornsecurity.github.io/blob/master/_posts/2020-10-11-TPLink.md · Exploit
• 🔥 https://therealunicornsecurity.github.io/TPLink · Exploit
• https://osv.dev/vulnerability/CVE-2020-36178 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36178 · Security Note
• https://tp-link.com/fr/support/download/tl-wr840n/v6/#Firmware · Vendor Advisory
• https://github.com/astarasikov/macos-gpu-fuzzing-public · Note
• https://t.me/cybersecuritytechnologies/2459 · Telegram Post
• https://t.me/cibsecurity/21723 · Telegram Post
• https://t.me/rnetsec/14132 · Telegram Post
• https://t.me/defcon_news/66027 · Telegram Post
• https://t.me/cvenotify/8237 · Telegram Post