CVE-2017-9466

Name of the Vulnerable Software and Affected Versions TP-Link WR841N V8 router versions prior to TL-WR841N(UN) V8 170210

Description The issue is related to a design flaw in the use of DES for block encryption in the httpd executable. This flaw resulted in incorrect access control, allowing attackers to gain read-write access to system settings through the protected router configuration service tddp via the LAN and Ath0 (Wi-Fi) interfaces.

Recommendations For TP-Link WR841N V8 router versions prior to TL-WR841N(UN) V8 170210, update to version TL-WR841N(UN) V8 170210 or later to resolve the issue.