9.8
CRITICAL
CVE-2020-9374
"TP-Link TL-WR849N Remote Command Execution Vulnerability"
Description

On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature.

INFO

Published Date :

Feb. 24, 2020, 7:15 p.m.

Last Modified :

Nov. 21, 2024, 5:40 a.m.

Remotely Exploitable :

Yes !

Impact Score :

5.9

Exploitability Score :

3.9
Public PoC/Exploit Available at Github

CVE-2020-9374 has a 16 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2020-9374 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Tp-link tl-wr849n_firmware
2 Tp-link tl-wr849n
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2020-9374.

URL Resource
http://packetstormsecurity.com/files/156584/TP-Link-TL-WR849N-Remote-Code-Execution.html Exploit Third Party Advisory VDB Entry
https://fireshellsecurity.team/hack-n-routers/ Exploit Third Party Advisory
https://github.com/ElberTavares/routers-exploit/tree/master/tp-link Exploit Third Party Advisory
http://packetstormsecurity.com/files/156584/TP-Link-TL-WR849N-Remote-Code-Execution.html Exploit Third Party Advisory VDB Entry
https://fireshellsecurity.team/hack-n-routers/ Exploit Third Party Advisory
https://github.com/ElberTavares/routers-exploit/tree/master/tp-link Exploit Third Party Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

Assembly Python Shell PHP C++ C Go Ruby HTML Java

Updated: 3 weeks, 5 days ago
6 stars 0 fork 0 watcher
Born at : Feb. 7, 2024, 2:08 p.m. This repo has been linked 305 different CVEs too.

None

Assembly Python Shell PHP C++ C Go Ruby HTML Java

Updated: 1 month, 3 weeks ago
7 stars 4 fork 4 watcher
Born at : Nov. 25, 2022, 2:30 a.m. This repo has been linked 270 different CVEs too.

None

Assembly Python Shell PHP C++ C Go

Updated: 3 months, 2 weeks ago
1 stars 0 fork 0 watcher
Born at : April 8, 2022, 10:20 a.m. This repo has been linked 126 different CVEs too.

安全类各家文库大乱斗

HTML CSS JavaScript Go Python Shell C

Updated: 2 weeks, 3 days ago
982 stars 241 fork 241 watcher
Born at : Feb. 15, 2022, 3:14 a.m. This repo has been linked 568 different CVEs too.

None

Assembly Python Shell PHP C++ C Go Ruby HTML Java

Updated: 1 month, 3 weeks ago
13 stars 10 fork 10 watcher
Born at : Jan. 27, 2022, 9:53 a.m. This repo has been linked 193 different CVEs too.

FROM:@Mr-xn 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

exploit cve cobaltstrike rce bypass cms-framework cms-exploits sql-scanner

Assembly Python Shell PHP C++ C Go

Updated: 2 months, 3 weeks ago
19 stars 7 fork 7 watcher
Born at : Jan. 11, 2022, 7:35 a.m. This repo has been linked 126 different CVEs too.

https://github.com/Mr-xn/Penetration_Testing_POC

Assembly Python Shell PHP C++ C Go Ruby HTML Java

Updated: 11 months, 1 week ago
8 stars 3 fork 3 watcher
Born at : Sept. 3, 2021, 4:53 a.m. This repo has been linked 161 different CVEs too.

None

Assembly Python Shell PHP C++ C Go Ruby HTML Java

Updated: 9 months ago
51 stars 17 fork 17 watcher
Born at : Sept. 27, 2020, 5:51 a.m. This repo has been linked 129 different CVEs too.

公开收集所用

Assembly Python Shell PHP C++ C Go Ruby HTML Java

Updated: 4 years, 3 months ago
0 stars 14 fork 14 watcher
Born at : Sept. 1, 2020, 9:27 a.m. This repo has been linked 126 different CVEs too.

公开收集所用

Assembly Python Shell PHP C++ C Go Ruby HTML Java

Updated: 4 years, 3 months ago
0 stars 15 fork 15 watcher
Born at : Aug. 31, 2020, 1:32 p.m. This repo has been linked 126 different CVEs too.

None

Assembly Python Shell PHP C++ C Go Ruby HTML Java

Updated: 3 years, 7 months ago
4 stars 1 fork 1 watcher
Born at : Aug. 22, 2020, 8:17 a.m. This repo has been linked 126 different CVEs too.

None

Assembly Python Shell PHP C++ C Go Ruby HTML Java

Updated: 10 months, 3 weeks ago
20 stars 5 fork 5 watcher
Born at : Aug. 21, 2020, 2:34 a.m. This repo has been linked 126 different CVEs too.

公开收集所用

Assembly Python Shell PHP C++ C Go Ruby HTML Java

Updated: 11 months ago
47 stars 16 fork 16 watcher
Born at : Aug. 17, 2020, 5:26 p.m. This repo has been linked 126 different CVEs too.

None

Assembly Python Shell PHP C++ C Go Ruby HTML Java

Updated: 5 months, 4 weeks ago
43 stars 8 fork 8 watcher
Born at : July 9, 2020, 9:28 a.m. This repo has been linked 108 different CVEs too.

None

Python

Updated: 4 months, 1 week ago
11 stars 6 fork 6 watcher
Born at : Feb. 22, 2020, 11:29 p.m. This repo has been linked 2 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2020-9374 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2020-9374 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Nov. 21, 2024

    Action Type Old Value New Value
    Added Reference http://packetstormsecurity.com/files/156584/TP-Link-TL-WR849N-Remote-Code-Execution.html
    Added Reference https://fireshellsecurity.team/hack-n-routers/
    Added Reference https://github.com/ElberTavares/routers-exploit/tree/master/tp-link
  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • Modified Analysis by [email protected]

    Jan. 01, 2022

    Action Type Old Value New Value
    Changed Reference Type http://packetstormsecurity.com/files/156584/TP-Link-TL-WR849N-Remote-Code-Execution.html No Types Assigned http://packetstormsecurity.com/files/156584/TP-Link-TL-WR849N-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry
  • CVE Modified by [email protected]

    Mar. 02, 2020

    Action Type Old Value New Value
    Added Reference http://packetstormsecurity.com/files/156584/TP-Link-TL-WR849N-Remote-Code-Execution.html [No Types Assigned]
  • Initial Analysis by [email protected]

    Feb. 28, 2020

    Action Type Old Value New Value
    Added CVSS V2 NIST (AV:N/AC:L/Au:N/C:P/I:P/A:P)
    Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type https://fireshellsecurity.team/hack-n-routers/ No Types Assigned https://fireshellsecurity.team/hack-n-routers/ Exploit, Third Party Advisory
    Changed Reference Type https://github.com/ElberTavares/routers-exploit/tree/master/tp-link No Types Assigned https://github.com/ElberTavares/routers-exploit/tree/master/tp-link Exploit, Third Party Advisory
    Added CWE NIST CWE-78
    Added CPE Configuration AND OR *cpe:2.3:o:tp-link:tl-wr849n_firmware:0.9.1_4.16:*:*:*:*:*:*:* OR cpe:2.3:h:tp-link:tl-wr849n:-:*:*:*:*:*:*:*
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2020-9374 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

64.56 }} 51.16%

score

0.98043

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability