CVE-2020-9374: TP-Link Tl-WR849N Firmware

Critical severity, CVSS 9.8. EPSS: 42.7% chance of exploitation in the next 30 days.

On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature.

Affected products

• TP-Link Tl-WR849N Firmware: version 0.9.1_4.16 only

Published 2020-02-24. Last modified 2026-06-17.