CVE-2018-12574

CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices...

CVE-2018-12574

CVE-2018-12574 affects TP-Link TL-WR841N v13. The web UI is vulnerable to Cross-Site Request Forgery via a flawed referer-based protection: requests from crafted domains bypass the check and perform arbitrary actions as an authenticated user. Affected version: 0.9.1 4.16 v0001.0 Build 180119 Rel....