CVE-2014-9510: Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL-WR840N (V1) rou...

Security readout for executives and security teams

CVE-2014-9510 affects TP-Link TL-WR840N V1 routers running firmware before 3.13.27 build 141120. A malicious site could abuse an already-authenticated administrator browser to submit a router configuration import request. This could let settings be changed without the administrator intending it. Exposure is likely limited to organizations or users still operating TP-Link TL-WR840N V1 devices with firmware older than 3.13.27 build 141120. Risk depends on administrative access patterns and whether administrators browse untrusted content while authenticated to the router interface. Treat this as a legacy network device hygiene issue with moderate urgency. Prioritize confirming whether affected V1 routers still exist, updating them, and replacing unsupported devices if vendor firmware is unavailable. Mitigation focus: Upgrade TL-WR840N V1 firmware to 3.13.27 build 141120 or later if available.; Check TP-Link support guidance for the exact V1 firmware package.; Restrict access to the router administration console to trusted management networks..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.