TP-Link WiFi Extender Remote Code Execution (CVE-2019-7406)

A remote code execution vulnerability exists in TP-Link WiFi Extender. An unauthenticated remote attacker can exploit this issue by sending an HTTP request with a specially crafted HTTP header. Successful exploitation could result in execution of arbitrary code on the affected system...

TP-Link Loses Control Over Configuration Domain

Top router firm TP-Link has lost control of two key domains accessed by millions of consumers and small businesses each month. The domains, which are used to configure the company’s routers, have expired and been resold to domain name brokers who are actively seeking buyers. Security experts say...