Vulnerability Details CVE-2019-6971
An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without knowledge of the credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.15
EPSS Ranking 94.3%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
- https://github.com/MalFuzzer/Vulnerability-Research/blob/master/TL-WR1043ND%20V2%20-%20TP-LINK/TL-WR1043ND_PoC.pdf
- https://twitter.com/MalFuzzer/status/1141269335685652480?s=19
- https://github.com/MalFuzzer/Vulnerability-Research/blob/master/TL-WR1043ND%20V2%20-%20TP-LINK/TL-WR1043ND_PoC.pdf
- https://twitter.com/MalFuzzer/status/1141269335685652480?s=19
Products affected by CVE-2019-6971
-
cpe:2.3:h:tp-link:tl-wr1043nd:-
-
cpe:2.3:o:tp-link:tl-wr1043nd_firmware:2.0