Administrator credential theft via Base64 HTTP cookie

Credential exposure in TP-Link TL-WR845N firmware 190219 allows man-in-the-middle attackers to obtain administrator credentials. The web management interface sends an HTTP POST cookie containing Basic Authorization credentials encoded only with reversible Base64 instead of protecting the request with transport encryption. Attackers must already be connected to the router's LAN or wireless network and poison ARP traffic while an administrator uses the portal; decoding the captured value discloses credentials reusable for administrative access.