Unscored severity · published Jan 9, 2015
CVE-2014-9510
Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL-WR840N (V1) router with firmware before 3.13.27 build 141120 allows remote attackers to…
–
CVSS
1%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL-WR840N (V1) router with firmware before 3.13.27 build 141120 allows remote attackers to hijack the authentication of administrators for requests that change router settings via a configuration file import.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TF
Tl-wr840n Firmware · Tp-link
3.13.27 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-9510
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-9510
seclists.org
http://seclists.org/fulldisclosure/2015/Jan/14
www.secureworks.com
http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2015-001/
www.securityfocus.com
http://www.securityfocus.com/bid/71913
Patch
http://www.tp-link.com/en/support/download/?model=TL-WR840N&version=V1
More from Tl-wr840n Firmware
6.5
CVE-2023-50224
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
9.8
CVE-2022-25064
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr
9.8
CVE-2022-25061
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute
9.8
CVE-2022-25060
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing
9.8
CVE-2021-41653
The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted payload in an IP address…