CVE-2019-19143

MEDIUM

TP-LINK TL-WR849N <4.16 - DoS

Title source: llm

TP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a POST request to the cgi/softup URI.

exploitdb WORKING POC

by Elber Tavares · textwebappshardware

CVSS v3 6.1

EPSS 0.0230

EPSS Percentile 84.8%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-306

Status published

Products (1)

tp-link/tl-wr849n_firmware 0.9.1_4.16

Published Jan 27, 2020

Tracked Since Feb 18, 2026