CVE-2017-9466

CVE-2017-9466 describes a critical design flaw in the TP-Link WR841N V8 router's httpd executable, specifically in its use of DES for block encryption. This vulnerability allowed attackers to bypass access controls and gain full read-write access to system settings via the router's configuration service (tddp) through both LAN and Wi-Fi interfaces. With a CVSS score of 9.8 (CRITICAL), it represents a high-impact threat, enabling complete compromise of the device without requiring user interaction or prior authentication. Despite its severity, there is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting it is not currently a widely targeted vulnerability.