CVE-2018-11714 PoC — TP-Link TL-WR840N和TL-WR841N 安全漏洞

Source

https://github.com/mikelkarma/cve-2018-11714_POC

Associated Vulnerability

Title:TP-Link TL-WR840N和TL-WR841N 安全漏洞 (CVE-2018-11714)
Description:An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action.

Description

An issue was discovered on TP-Link TL-WR840N. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action.

Readme

# cve-2018-11714_POC
An issue was discovered on TP-Link TL-WR840N. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action.


artigo [pt-br]: https://nous.sidneypepo.com/router2025.html

File Snapshot


 [4.0K]  /data/pocs/242e522b44224c083a31ae090137ca49b4885501
├── [ 926]  poc.py
└── [ 343]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!