Vulnerabilities > CVE-2019-6971 - Unspecified vulnerability in Tp-Link Tl-Wr1043Nd Firmware 2.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without knowledge of the credentials.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 1 | |
| Hardware | 1 |
Packetstorm
| data source | https://packetstormsecurity.com/files/download/154787/tplinktlwr1043nd2-bypass.txt |
| id | PACKETSTORM:154787 |
| last seen | 2019-10-10 |
| published | 2019-10-10 |
| reporter | Uriel Kosayev |
| source | https://packetstormsecurity.com/files/154787/TP-Link-TL-WR1043ND-2-Authentication-Bypass.html |
| title | TP-Link TL-WR1043ND 2 Authentication Bypass |
References
- https://github.com/MalFuzzer/Vulnerability-Research/blob/master/TL-WR1043ND%20V2%20-%20TP-LINK/TL-WR1043ND_PoC.pdf
- https://twitter.com/MalFuzzer/status/1141269335685652480?s=19
- https://github.com/MalFuzzer/Vulnerability-Research/blob/master/TL-WR1043ND%20V2%20-%20TP-LINK/TL-WR1043ND_PoC.pdf
- https://twitter.com/MalFuzzer/status/1141269335685652480?s=19