TP-LINK TL-WR841N prior TL-WR841N(UN)_V8_170210 Configuration Service risky encryption

Summaryinfo

A vulnerability was found in TP-LINK TL-WR841N. It has been classified as critical. Affected by this issue is some unknown functionality of the component Configuration Service. Performing a manipulation results in risky encryption. This vulnerability is reported as CVE-2017-9466. The attacker must have access to the local network to execute the attack. No exploit exists. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability classified as critical has been found in TP-LINK TL-WR841N (Router Operating System). This affects an unknown code block of the component Configuration Service. The manipulation with an unknown input leads to a risky encryption vulnerability. CWE is classifying the issue as CWE-327. The product uses a broken or risky cryptographic algorithm or protocol. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use of DES for block encryption. This resulted in incorrect access control, which allowed attackers to gain read-write access to system settings through the protected router configuration service tddp via the LAN and Ath0 (Wi-Fi) interfaces.

The bug was discovered 06/19/2017. The weakness was disclosed 06/26/2017 (Website). It is possible to read the advisory at blog.senr.io. This vulnerability is uniquely identified as CVE-2017-9466 since 06/06/2017. Access to the local network is required for this attack. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1600 according to MITRE ATT&CK.

The vulnerability was handled as a non-public zero-day exploit for at least 7 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version TL-WR841N(UN)_V8_170210 eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• TP-LINK

Name

• TL-WR841N

License

• commercial

Website

• Vendor: https://www.tp-link.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion