Deviceways

Router

TP-LINK TL-WR849N

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v4.0 · GigaDevice GD25Q64CSIG
Open hardware record
v4.0 (BR)
Get OpenWrt firmware Release listed · 25.12.6
v4.0 (BR)
Open hardware record
Original project github.com

v4.0 (BR)

First installation
U-Boot TFTP recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

tp-link tl-wr849n v4.0 br — device documentation (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
v4.0 (BR)

Device details

TP-LINK TL-WR849N(BR) v4.0 — TechInfoDepot (github.com)

Hardware revision
v4.0

Device details

TP-LINK TL-WR849N(BR) v5.0 — TechInfoDepot (github.com)

Hardware revision
v5.0

Device details

TP-LINK TL-WR849N(BR) v6.0 — TechInfoDepot (github.com)

Hardware revision
v6.0

Device details

TP-LINK TL-WR849N(BR) v6.20 — TechInfoDepot (github.com)

Hardware revision
v6.20

Device details

TP-LINK TL-WR849N(BR) v4.0 — WikiDevi (github.com)

Hardware revision
(BR) v4.0

OpenWrt · v4.0 (BR)

OpenWrt · v4.0 (BR) — Source documentation (openwrt.org)

Installation routes recorded
U-Boot TFTP recovery
Recovery routes recorded
U-Boot TFTP recovery
Availability recorded by source
Discontinued

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

TP-LINK TL-WR849N

On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the…

CVE-2020-9374

Affected firmware
TL-WR849N: 0.9.1 4.16
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature.

CVE published

TP-LINK TL-WR849N

TP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a POST request to the cgi/softup URI.

CVE-2019-19143

Affected firmware
TL-WR849N: 0.9.1 4.16
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

TP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a POST request to the cgi/softup URI.

Check more security advisories for this device · CVE.org