We have learned about the issue published by checkpoint a few days before, but we confirm it cannot actually attack our modem router (latest hardware & firmware versions for all models).
Let’s have a further explanation, attackers make up cookies which includes our modem router’s internal actions, and send it to LAN IP of the modem router, then the router will respond to the cookie. For example, attacker makes up a cookie which includes “rom-0”, and send it to our modem with LAN IP address 192.168.1.1, then the router receives it and respond “rom-0 not found”.
It in fact equals to access the router via http://192.168.1.1/rom-0 (or other URL), but all our modem routers with security mechanism firmware has already banned this way to access the router or control the router. It will returns a error “not found” to the attacker. So attackers could do nothing to your internal network. All our modem routers for sale now have security mechanism firmware to keep it away from being attacked. Please don’t worry about this issue if your modem router is already using the latest hardware and firmware on our global website. In the near future, we will also release new firmware, and don’t respond to the cookie any more, ease the issue from the root.
If your modem router is not using latest hardware, however, please refer to this FAQ to do some settings, it will also make your modem router more safe.
http://www.tp-link.com/en/article/?faqid=573