TP-Link Tl-WR849N Firmware vulnerabilities

2 CVEs affecting TP-Link Tl-WR849N Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9374, published 2020-02-24.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-9374, published 2020-02-24. Critical severity, CVSS 9.8. EPSS: 42.7% chance of exploitation in the next 30 days. On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's…
• CVE-2019-19143, published 2020-01-27. Medium severity, CVSS 6.1. EPSS: 7.3% chance of exploitation in the next 30 days. TP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a POST request to the cgi/softup URI.