Authentication Bypass in TP-LINK TL-WR849N Devices

CVE-2019-19143

Summary

The TP-LINK TL-WR849N 0.9.1 4.16 devices are impacted by a vulnerability that allows attackers to replace the firmware without requiring authentication. By sending a crafted POST request to the cgi/softup URI, unauthorized users can exploit this loophole, leading to potential unauthorized access and control over the device. This poses significant risks to network security and integrity, making it essential for users to secure their devices against such vulnerabilities.

References