PT-2025-6737 · Tp Link · Tp-Link Wr840N V6

Shuanunio · Published 2025-02-18 · Updated 2025-04-07 · CVE-2024-57050

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link WR840N V6 router versions 0.9.1 4.16 and earlier

Description A vulnerability in the TP-Link WR840N V6 router permits unauthorized individuals to bypass the authentication of some interfaces under the /cgi directory. When adding a Referer header with the value http://tplinkwifi.net to the request, it will be recognized as passing the authentication.

Recommendations For TP-Link WR840N V6 router versions 0.9.1 4.16 and earlier, consider disabling access to the /cgi directory until a patch is available. Restrict access to the router's web interface to minimize the risk of exploitation. Avoid using the Referer header with the value http://tplinkwifi.net in requests to the router's web interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2025-02222

CVE-2024-57050

Affected Products

Tp-Link Wr840N V6

References · 9

• 🔥 https://github.com/Shuanunio/CVE_Requests/blob/main/TP-Link/WR840N%20v6/ACL%20bypass%20Vulnerability%20in%20TP-Link%20TL-WR840N.md · Exploit
• https://bdu.fstec.ru/vul/2025-02222 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-57050 · Security Note
• https://twitter.com/ET_Labs/status/1909347800841879608 · Twitter Post
• https://t.me/cvedetector/18330 · Telegram Post
• https://twitter.com/CVEnew/status/1891862884558266718 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1891887942227972577 · Twitter Post
• https://twitter.com/gothburz/status/1908274357530419551 · Twitter Post
• https://t.me/csirt_italia/2324 · Telegram Post