【中国】TP-Link製Wi-Fiルーターにバックドア [雷★]

元スレ

1雷 ★2021/04/14(水) 19:56:57.25ID:4baeOaOe9 TP-Link http/tftp backdoor

About the TP-Link Routertp-logo

TP-Link TL-WDR4300 is a popular dual band WiFi, SOHO class router.

Tested Firmware

We tested the remote root PoC on the newest firmware (published on 25.12.2012):

firmware
TL-WDR4300 – tested firmware version
The following info is provided for educational use only! We are also not resposible for any potential damages of the devices which are tested for this vulnerability.

Update: more info about the issues in the router is available here.
Proof of Concept

Update2: it works on WAN port if http admin is open on WAN. Also, many (if not all) other TP-Link devices are affected!
https://sekurak.pl/tp-link-httptftp-backdoor/

Update2: WAN上でhttpの管理画面が開いていれば、WANポートでも動作します。また、他の多くのTP-Link機器にも影響があります（全てではないにしても）。