CVE-2020-9374 - On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature

Back Back to CVE browser

CRITICAL

On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature

Published Feb 24, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 42.67%

Description

On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (3)

http://packetstormsecurity.com/files/156584/TP-Link-TL-WR849N-Remote-Code-Execution.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://fireshellsecurity.team/hack-n-routers/
x_refsource_MISCExploitThird Party Advisory
https://github.com/ElberTavares/routers-exploit/tree/master/tp-link
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/156584/TP-Link-TL-WR849N-Remote-Code-Execution.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://fireshellsecurity.team/hack-n-routers/		x_refsource_MISCExploitThird Party Advisory
https://github.com/ElberTavares/routers-exploit/tree/master/tp-link		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 24, 2020

Updated Aug 4, 2024

Reserved Feb 24, 2020

Link CVE-2020-9374

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9374

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-9374