Over 185,000 TP-Link routers vulnerable to remote code execution (again) with no patch available

Published by

Click here to post a comment for Over 185,000 TP-Link routers vulnerable to remote code execution (again) with no patch available on our message forum
data/avatar/default/avatar12.webp
I personally don't buy TP-link products because of their poor driver and other software support, which these days is the most critical part of any device in a PC enviroment.
https://forums.guru3d.com/data/avatars/m/239/239175.jpg
I wonder how viable a Raspberry Pi is as a router. It surely can run way more sophisticated software than actual "home" routers, and you can always keep it up to date easily.
https://forums.guru3d.com/data/avatars/m/261/261368.jpg
I have only bought Asus routers for last years and I couldn’t be happier. There is just no competition when you can get security updates almost monthly. I wish there would be more brands to choose from.
https://forums.guru3d.com/data/avatars/m/79/79740.jpg
I use TP-Link routers (Archer series) and love them. Fortunately they are not affected. Only 2 of the lower end older models are affected.
data/avatar/default/avatar15.webp
RealNC:

I wonder how viable a Raspberry Pi is as a router. It surely can run way more sophisticated software than actual "home" routers, and you can always keep it up to date easily.
You could use the Raspberry Pi as a AP I guess, but the ethernet performance in is pretty abysmal, as it's attached to the USB. The integrated wifi performance is pretty poor aswell. There are other products from other manufacturers that have pci-express connected networking, but they might have worse software support. (Things like Banana Pi boards) Personally I have a Turris Omnia which has a OpenWRT based automatically updating OS. It also happily routes around 900Mbps from WAN to LAN.
https://forums.guru3d.com/data/avatars/m/243/243702.jpg
Most of their routers can run OpenWRT. That's best option for them anyway. I have it on my old one too. (Now sitting in storage, but ready in case of need.)
https://forums.guru3d.com/data/avatars/m/227/227994.jpg
Fox2232:

Most of their routers can run OpenWRT. That's best option for them anyway. I have it on my old one too. (Now sitting in storage, but ready in case of need.)
I recently switched to Xwrt on my Netgear R7000, best move i ever made. Getting a much better WiFi signal and the UI is a lot faster and cleaner.
https://forums.guru3d.com/data/avatars/m/239/239932.jpg
Fox2232:

Most of their routers can run OpenWRT. That's best option for them anyway. I have it on my old one too. (Now sitting in storage, but ready in case of need.)
I was looking into LEDE/OpenWRT recently for my old linksys but there's too little setup instructions. I saw on yt some videos and they all involved making vlans or whatever for wifi ... too complicated 😛
GamerNerves:

I personally don't buy TP-link products because of their poor driver and other software support, which these days is the most critical part of any device in a PC enviroment.
Wifi drivers are almost universally bad lol. I did buy a tp link wireless adapter last year and I am using a generic broadcom driver from windows update catalog (it won't show up normally in wu). Station drivers versions all caused bsod's and the one on tp's site didn't always connect to my wifi automatically on start up.
https://forums.guru3d.com/data/avatars/m/243/243702.jpg
TheDeeGee:

I recently switched to Xwrt on my Netgear R7000, best move i ever made. Getting a much better WiFi signal and the UI is a lot faster and cleaner.
Well, I have old router. WAN 1Gbps, 4xLAN each 100Mbps, WLan 2,4GHz 54Mbps. Installed with all special features disabled (Firewall, UI, shares, ...) Configured to make WAN,LAN,WLAN as one network. So, router does not have IP address on any of "ports/interfaces", just MACs. Basically works as switch for WAN - LAN - WLAN. No way to connect to this router anymore via WAN,LAN,WLAN. Configuration possible only via internal connector and "USB TTL UART CP2102" + putty 🙂 I did this as perfect LAN party extension for mobile devices, as this puts them into same logical network.
data/avatar/default/avatar21.webp
Trying to spy on poor people again?
data/avatar/default/avatar09.webp
The TP-Link routers I've dealt with have gotten updates even though they've become more than five years old, so IMO TP-Link seems to be one of the companies with better support.
https://forums.guru3d.com/data/avatars/m/263/263421.jpg
lucidus:

I was looking into LEDE/OpenWRT recently for my old linksys but there's too little setup instructions. I saw on yt some videos and they all involved making vlans or whatever for wifi ... too complicated 😛
If OpenWRT is too complicated for you, try DDWRT or Tomato.
https://forums.guru3d.com/data/avatars/m/272/272202.jpg
They will have their work cut out for them now.
https://forums.guru3d.com/data/avatars/m/189/189980.jpg
Running a TpLink with DDWRT flashed on it. It works and waits for an upgrade to a dedicated pFsense box. Still, haven't managed to finish this project, but I may soon.
data/avatar/default/avatar40.webp
the only good from TP-link is their price... basically no other brand can compete with their aggressive pricing for their router, pick the one that supported by wrt or other modded firmware
Perjantai:

I have only bought Asus routers for last years and I couldn’t be happier. There is just no competition when you can get security updates almost monthly. I wish there would be more brands to choose from.
u get high-end new model right ? just wait a year or 2 after release... they will slacking and focusing on newer model i have several asus routers, their firmware support also no good, only new model get frequest firmware update... but after 1-2year after release (especially if they release newer model), they basically stop updating the firmware on older device i have yet find brand that have good software/firmware support (i mean as long they sell the product) basically all consumer(end-user) network brand i been used (linksys-asus-tplink-netgear) is like half-assed with their firmware
https://forums.guru3d.com/data/avatars/m/189/189980.jpg
This could change your mindset about routers. How the design starts, how the firmware is developed, the inner works, just pure geek talk. I know i leaned something from it, and now i am on the way to build my own router running pFsense. [youtube=agieD5uiwYY]
data/avatar/default/avatar39.webp
Would REALLY suggest running Gargoyle on TP-Link routers. Great development community.
https://forums.guru3d.com/data/avatars/m/258/258664.jpg
Yakk:

Would REALLY suggest running Gargoyle on TP-Link routers. Great development community.
My first instinct too was to say, install custom firmware, then again there's no guarantee that such a fix has been incorporated (yet).