CVE-2024-57050

Summary

CVE-2024-57050 is a vulnerability affecting TP-Link WR840N v6 routers with firmware version 0.9.1 4.16 and earlier. This issue enables unauthorized access by permitting bypass of authentication for certain interfaces within the /cgi directory. By adding a Referer header with the value "http://tplinkwifi.net" to their requests, attackers can deceitfully bypass the authentication process. This vulnerability poses a significant risk to network security and requires immediate attention from users to update their firmware.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.