CyberRota Analysis
AI-GeneratedA NULL pointer dereference vulnerability in the HTTP request parsing of TL-MR6400 v7 allows unauthenticated remote attackers to crash the HTTP service by sending a specially crafted HTTP request with a malformed session cookie header. This can lead to a denial-of-service condition, temporarily disrupting management and CGI functionalities. Network administrators and organizations using this router model should prioritize patching or mitigating this vulnerability to prevent potential service interruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A NULL pointer dereference vulnerability exists in the HTTP request parsing functionality of TL-MR6400 v7. An unauthenticated remote attacker can trigger the vulnerability by sending a specially crafted HTTP request containing a malformed session cookie header. Successful exploitation may cause the HTTP service process to crash, resulting in a denial-of-service condition and temporary loss of management or CGI functionality until service recovery.