cve/2019/CVE-2019-19143.md

CVE-2019-19143

Description

TP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a POST request to the cgi/softup URI.

POC

Reference

• http://packetstormsecurity.com/files/156586/TP-Link-TL-WR849N-0.9.1-4.16-Authentication-Bypass.html
• https://fireshellsecurity.team/hack-n-routers/

Github

• https://github.com/ElberTavares/routers-exploit