TP-Link Archer C1200 Clickjacking Vulnerability in Web Management Interface

A clickjacking vulnerability has been identified in the TP-Link Archer C1200 router, affecting versions through 1.1.5. This vulnerability allows attackers to deceive users into performing unintended actions by overlaying UI elements or frames on top of the web management page. If a user is logged into the management interface and visits a malicious site, they could unknowingly interact with hidden elements, leading to unintended consequences.

Impact

Exploitation of this vulnerability could result in users unintentionally interacting with the router's web management interface, potentially allowing for unauthorized changes or actions.

Remediation

TP-Link advises users with affected devices to upgrade to a supported model that receives automatic updates. Instructions for this can be found on the TP-Link website.