critical9.8Public exploit code
CVE-2020-9374
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shel…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TP LINK TL-WR849N - Remote Code Execution2020-03-02 · webapps · hardware
Impact
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Tl-Wr849n Firmware | Version 0.9.1_4.16 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/156584/TP-Link-TL-WR849N-Remote-Code-Execution.html
- https://fireshellsecurity.team/hack-n-routers/
- https://github.com/ElberTavares/routers-exploit/tree/master/tp-link
- http://packetstormsecurity.com/files/156584/TP-Link-TL-WR849N-Remote-Code-Execution.html
- https://fireshellsecurity.team/hack-n-routers/
- https://github.com/ElberTavares/routers-exploit/tree/master/tp-link