TP-Link Router Bug Lets Attackers Login Without Passwords

guest · Dec 16, 2019

TP-Link Router Bug Lets Attackers Login Without Passwords
December 16, 2019
https://www.bleepingcomputer.com/ne...r-bug-lets-attackers-login-without-passwords/

TP-Link patched a critical vulnerability impacting some of its Archer routers that could allow potential attackers to void their admin passwords and remotely take control of the devices over LAN via a Telnet connection.

"If exploited, this router vulnerability can allow a remote attacker to take control of the router’s configuration via Telnet on the local area network (LAN) and connect to a File Transfer Protocol (FTP) server through the LAN or wide area network (WAN)," found IBM X-Force Red's Grzegorz Wypych.
Full router takeover
Since the only type of users on these routers is admin with full root permissions, once the threat actors bypass the authentication process, they would automatically get admin privileges on the router.

"Not only can attackers attain privileged access, but the legitimate user can also be locked out [...] "In such an event, the victim could lose access to the console and even a shell, and thereby would not be able to re-establish a new password."
Security patches available
TP-Link has already released patches to help customers protect their routers against attacks that would abuse the security vulnerability currently tracked as CVE-2019-7405.
Click to expand...

IBM X-Force: TP-Link Archer Router Vulnerability Voids Admin Password, Can Allow Remote Takeover

Log in or Sign up

TP-Link Router Bug Lets Attackers Login Without Passwords

guest Guest

Log in or Sign up

TP-Link Router Bug Lets Attackers Login Without Passwords

guest Guest

Useful Searches