CVE-2018-11714

Name: CVE-2018-11714
Creator: NVD / NIST
Published: 2018-06-04T14:29:00.5+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 36.52%

Last modified Jun 17, 2026

CVE-2018-11714 is a vulnerability of currently unknown severity. An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. EPSS estimates a 36.52% chance of exploitation in the next 30 days.

Description

An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action.

Metrics

EPSS Probability

36.52%

98.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-384

Affected Software

Vendor	Product	Versions
Tp-Link	Tl-Wr840n Firmware	0.9.1_3.16
Tp-Link	Tl-Wr841n Firmware	0.9.1_4.16

References

http://blog.securelayer7.net/time-to-disable-tp-link-home-wifi-router/Exploit, Third Party Advisory
https://www.exploit-db.com/exploits/44781/Exploit, Third Party Advisory, VDB Entry
http://blog.securelayer7.net/time-to-disable-tp-link-home-wifi-router/Exploit, Third Party Advisory
https://www.exploit-db.com/exploits/44781/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Jun 4, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-11714?

How severe is CVE-2018-11714?

Severity scoring for CVE-2018-11714 is pending analysis. The EPSS model estimates a 36.52% probability of exploitation in the next 30 days.

How do I fix CVE-2018-11714?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-11714?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST