CVE-2019-6972

CVE-2019-6972 describes a critical vulnerability in TP-Link TL-WR1043ND V2 devices where user credentials, specifically those in the "Authorization" cookie, are easily decodable due to simple URL encoding and Base64. The username is stored in cleartext, and the password is MD5 hashed, making it susceptible to brute-force, wordlist, or rainbow table attacks. With a CVSS score of 7.5 (HIGH), this vulnerability allows an unauthenticated attacker to gain full access to sensitive information over the network with low attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.