CVE-2020-9374
CRITICAL EXPLOITEDTP-Link TL-WR849N 0.9.1 4.16 - Remote Code Execution via Traceroute Shell Metacharacter Injection
Title source: llmExploitation Summary
CVE-2020-9374 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Elber Tavares.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in TP-Link TL-WR849N routers by injecting arbitrary commands into the `host` parameter of a traceroute diagnostic request. It establishes a session with authentication and executes commands via a crafted POST request.
Description
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature.
Exploits (1)
This exploit leverages a command injection vulnerability in TP-Link TL-WR849N routers by injecting arbitrary commands into the `host` parameter of a traceroute diagnostic request. It establishes a session with authentication and executes commands via a crafted POST request.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H