CVE-2024-57050

View on CVE.org
Published Feb 18, 2025 CVSS n/a EPSS n/a KEV · Not listed
Description
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11714. Reason: This candidate is a reservation duplicate of CVE-2018-11714. Notes: All CVE users should reference CVE-2018-11714 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Analysis

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11714. Reason: This candidate is a reservation duplicate of CVE-2018-11714. Notes: All CVE users should reference CVE-2018-11714 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
References

No reference.

History
Type Values Removed Values Added
Weaknesses CWE-287
CPEs cpe:2.3:h:tp-link:wr840n:6:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wr840n_firmware:*:*:*:*:*:*:*:*
Vendors & Products Tp-link
Tp-link wr840n
Tp-link wr840n Firmware
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}
Type Values Removed Values Added
Description A vulnerability in the TP-Link WR840N v6 router with firmware version 0.9.1 4.16 and earlier permits unauthorized individuals to bypass the authentication of some interfaces under the /cgi directory.When adding Referer: http://tplinkwifi.net to the the request, it will be recognized as passing the authentication. DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11714. Reason: This candidate is a reservation duplicate of CVE-2018-11714. Notes: All CVE users should reference CVE-2018-11714 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Tp-link
Tp-link wr840n
Tp-link wr840n Firmware
CPEs cpe:2.3:h:tp-link:wr840n:6:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:wr840n_firmware:*:*:*:*:*:*:*:*
Vendors & Products Tp-link
Tp-link wr840n
Tp-link wr840n Firmware
Type Values Removed Values Added
Weaknesses CWE-287
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A vulnerability in the TP-Link WR840N v6 router with firmware version 0.9.1 4.16 and earlier permits unauthorized individuals to bypass the authentication of some interfaces under the /cgi directory.When adding Referer: http://tplinkwifi.net to the the request, it will be recognized as passing the authentication.
References

Subscriptions

No data.

Weaknesses

No weakness.

Sources

Status
REJECTED
Assigner
mitre
Published
Updated
Jun 16, 2025, 10:03 PM
Reserved
Jan 9, 2025, 12:00 AM

View source JSON

Updated

JSON

Status
Rejected
Published
Feb 18, 2025, 3:15 PM
Modified
Jun 16, 2025, 10:15 PM

View source JSON

No data.

No data.