TP-Link Archer Series Missing Authentication Vulnerability in HTTP Server Endpoints Allowing Privileged Access

A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500, and NX600 routers in certain firmware versions allows unauthenticated access to CGI endpoints intended for authenticated users. This vulnerability enables attackers to perform privileged HTTP actions without authentication, such as uploading firmware and modifying configuration settings.

Impact

Exploitation of this vulnerability allows for unauthorized access to privileged HTTP actions, including firmware uploads and configuration changes, potentially leading to unauthorized modifications of the device's functionality or settings.

Remediation

Users are advised to update to the latest firmware version. Firmware updates can be downloaded from the TP-Link support pages for each affected model.