CVE-2019-6971

Critical · 9.8

CVSS

9.8

EPSS

13.7%

Published

Jun 19, 2019

CISA due date

—

The record

An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without knowledge of the credentials.

Affected packages

Ecosystem	Package	Introduced	Fixed