TP-Link TL-WR841N - Command Injection Exploit

Exploit Title: TP-Link TL-WR841N - Command Injection Exploit Author: Koh You Liang Vendor Homepage: https://www.tp-link.com/ Software Link: https://static.tp-link.com/TL-WR841NJPV13161028.zip Version: TL-WR841N 0.9.1 4.0 Tested on: Windows 10 CVE : CVE-2020-35575 import requests import sys import...

TP-Link TL-WR841N Command Injection

Exploit Title: TP-Link TL-WR841N - Command Injection Date: 2020-12-13 Exploit Author: Koh You Liang Vendor Homepage: https://www.tp-link.com/ Software Link: https://static.tp-link.com/TL-WR841NJPV13161028.zip Version: TL-WR841N 0.9.1 4.0 Tested on: Windows 10 CVE : CVE-2020-35575 import requests...

CVE-2020-35575

creationtimestamp| type| source ---|---|--- 2020-12-26 07:26:44+00:00| seen| https://t.me/cibsecurity/21322...

CVE-2020-35575

A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9201211 beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N,...

CVE-2020-35575

CVE-2020-35575 is a password-disclosure vulnerability in the web interface of various TP-Link devices (e.g., WA901ND family, Archer C5/C7, MR-series, WR/WRD-series). The issue allows remote attackers to obtain full administrative access to the device web panel. The public descriptions identify a ...