CVE-2017-9466
CriticalSummary
The TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use of DES for block encryption. This resulted in incorrect access control, allowing attackers to gain read-write access to system settings through the protected router configuration service tddp.
Risk Assessment
As a result of this vulnerability, attackers can gain unauthorized access to the router's settings, potentially leading to serious security breaches within the local network.
Recommendation
It is recommended to update the router's firmware to the latest version to mitigate this vulnerability and implement additional security measures to protect against unauthorized access.
Original NVD description (English source)
The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use of DES for block encryption. This resulted in incorrect access control, which allowed attackers to gain read-write access to system settings through the protected router configuration service tddp via the LAN and Ath0 (Wi-Fi) interfaces.