ID

VAR-201303-0572


TITLE

Some TP-LINK routers have backdoor vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2013-01769

DESCRIPTION

TP-Link is a popular wireless router. Some TP-Link wireless router devices have backdoors in their implementations, which can completely control the devices by sending specific requests. Send a request to the device "http://192.168.0.1/userRpmNatDebugRpm26525557/start_art.html" (here assume that the router IP is 192.168.0.1), the router will download a nart.out file from the requesting machine and execute it with root authority file.

Trust: 0.6

sources: CNVD: CNVD-2013-01769

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2013-01769

AFFECTED PRODUCTS

vendor:tp linkmodel:tl-wdr4300 tl-wdr4300scope: - version: -

Trust: 0.6

vendor:tp linkmodel:tl-wdr4300 tl-wr743ndscope:eqversion:1.2/2.0

Trust: 0.6

sources: CNVD: CNVD-2013-01769

EXTERNAL IDS

db:CNVDid:CNVD-2013-01769

Trust: 0.6

sources: CNVD: CNVD-2013-01769

REFERENCES

url:http://sekurak.pl/tp-link-httptftp-backdoor/

Trust: 0.6

sources: CNVD: CNVD-2013-01769

SOURCES

db:CNVDid:CNVD-2013-01769

LAST UPDATE DATE

2022-05-04T10:20:02.390000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2013-01769date:2020-03-10T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2013-01769date:2013-03-14T00:00:00