CyberRota Analysis
AI-GeneratedDD-WRT firmware on TP-Link TL-WR740N v1 through v4 devices is vulnerable due to the storage of sensitive authentication credentials in cleartext within non-volatile memory. This exposure allows an attacker with physical access to extract SSH private keys, dynamic DNS passwords, and administrative credentials, potentially leading to device compromise and unauthorized access to the connected network and third-party services. Organizations using these devices should prioritize remediation to mitigate risks associated with physical security breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An attacker with physical access to the device can extract these credentials from an SPI flash dump, leading to device compromise, infiltration of the connected network and unauthorised access to dependent third-party services.