Description
TP-LINK WR840N v6 路由器在 /cgi/getParm 接口中存在权限绕过漏洞，攻击者无需身份验证即可获取敏感配置信息。
TP-LINK WR840N v6 /cgi/getParm 权限绕过漏洞（CVE-2024-57050）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.ddpoc.com/DVB-2026-11097.html
https://github.com/runZeroInc/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57050.yaml
https://www.cvedetails.com/cve/CVE-2024-57050/
https://nvd.nist.gov/vuln/detail/CVE-2024-57050
https://pentest-tools.com/vulnerabilities-exploits/tp-link-wr840n-v6-up-to-091-416-improper-authentication_26855