Lucene search

[email protected]NVD:CVE-2019-19143

HistoryJan 27, 2020 - 7:15 p.m.

CVE-2019-19143

2020-01-2719:15:11

CWE-306

[email protected]

web.nvd.nist.gov

CVSS2

4.1

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:P/A:N

CVSS3

6.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

AI Score

6.4

Confidence

High

EPSS

0.004

Percentile

72.7%

JSON

TP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a POST request to the cgi/softup URI.

Affected configurations

Nvd

Node

tp-linktl-wr849n_firmwareMatch0.9.1_4.16

AND

tp-linktl-wr849nMatch-

VendorProductVersionCPE
tp-linktl-wr849n_firmware0.9.1_4.16cpe:2.3:o:tp-link:tl-wr849n_firmware:0.9.1_4.16:*:*:*:*:*:*:*
tp-linktl-wr849n-cpe:2.3:h:tp-link:tl-wr849n:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tp-link	tl-wr849n_firmware	0.9.1_4.16	cpe:2.3:o:tp-link:tl-wr849n_firmware:0.9.1_4.16:::::::*
tp-link	tl-wr849n	-	cpe:2.3:h:tp-link:tl-wr849n:-:::::::*