What’s Vulnerable › Vulnerabilities

CVE-2018-12575

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-07-02 · updated 2026-06-17
• Weakness: CWE-287

Description

On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request.

Affected products

• TP-Link TL-WR841N: 0.9.1_4.16

References

• https://software-talk.org/blog/2018/06/tplink-wr841n-broken-auth-cve-2018-12575/
• https://software-talk.org/blog/2018/06/tplink-wr841n-broken-auth-cve-2018-12575/

Get alerted when CVE-2018-12575 or the next vulnerability affects your stack