Security Flaw in TP-Link TL-WR1043ND V2 Devices Makes Credentials Vulnerable

CVE-2019-6972

Summary

A vulnerability exists in TP-Link TL-WR1043ND V2 devices that allows attackers to decode and crack sensitive credentials easily. The issue stems from the encoding of credentials in the 'Authorization' cookie using URL encoding followed by Base64 encoding. This flawed approach permits attackers to utilize brute-force, WordList, or Rainbow Table attacks effectively. Notably, usernames are stored in cleartext, while passwords are hashed using the outdated MD5 algorithm, making them highly susceptible to compromise. Implementing stronger encryption and enhancing password management practices are essential to mitigate this risk.

References