PT-2017-18939
CVE-2017-9466
·
تاريخ النشر
2017-06-26
·
تاريخ التحديث
2017-07-06
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
TP-Link WR841N V8 router versions prior to TL-WR841N(UN) V8 170210
Description
The issue is related to a design flaw in the use of DES for block encryption in the httpd executable. This flaw resulted in incorrect access control, allowing attackers to gain read-write access to system settings through the protected router configuration service tddp via the LAN and Ath0 (Wi-Fi) interfaces.
Recommendations
For TP-Link WR841N V8 router versions prior to TL-WR841N(UN) V8 170210, update to version TL-WR841N(UN) V8 170210 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾