CVE-2016-1000009

CVE-2016-1000009 describes a vulnerability where TP-Link lost control of the domains www.tplinklogin.net and tplinkextender.net, which are physically printed on many of their devices. This presents a high-severity risk (CVSS 7.5) due to an unauthenticated network attack that could lead to high integrity impact, potentially allowing an attacker to redirect users to malicious sites. While no active exploitation, public exploit code, or significant community discussion has been observed, the inherent risk remains due to the potential for domain hijacking and subsequent user compromise.