CVE-2024-57040

CRITICAL EXPLOITED

TP-Link TL-WR845N Firmware < 250401 - Use of Hard-coded Credentials

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2024-57040 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including absholi7ly.

AI-analyzed exploit summary This PoC exploits CVE-2024-57040, a hardcoded password vulnerability in TP-Link TL-WR845N routers, by using default credentials to establish an SSH connection and provide an interactive shell. It targets specific firmware versions and requires the router to be in a factory default state.

Description

TP-Link TL-WR845N devices with firmware TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded password for the root account which can be obtained by analyzing downloaded firmware or via a brute force attack through physical access to the router. NOTE: The supplier has stated that this issue was fixed in firmware versions 250401 or later.

Exploits (1)

nomisec WORKING POC 2 stars
by absholi7ly · remote
https://github.com/absholi7ly/Poc-CVE-2024-57040

This PoC exploits CVE-2024-57040, a hardcoded password vulnerability in TP-Link TL-WR845N routers, by using default credentials to establish an SSH connection and provide an interactive shell. It targets specific firmware versions and requires the router to be in a factory default state.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: TP-Link TL-WR845N(UN)_V4_190219 / TL-WR845N(UN)_V4_200909 / TL-WR845N(UN)_V4_201214
Auth required
Prerequisites: Router must be using default credentials · SSH must be enabled on the router · Router must be reachable on the network
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0105
EPSS Percentile 59.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

VulnCheck KEV 2026-01-20
CWE
CWE-798
Status published
Products (3)
tp-link/tl-wr845n_firmware 190219
tp-link/tl-wr845n_firmware 200909
tp-link/tl-wr845n_firmware 201214
Published Feb 26, 2025
Tracked Since Feb 18, 2026