PT-2017-18221 · Tp Link · Tp-Link C2+1

Pierre Kim · Publicado 2017-04-25 · Atualizado 2020-08-24 · CVE-2017-8217

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n

Description The issue is related to too permissive iptables rules. For example, SNMP is not blocked on any interface, which could pose a security risk.

Recommendations For TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n, consider restricting access to SNMP on all interfaces until a firmware update with corrected iptables rules is available.

Exploit

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2017-8217

Produtos afetados

Tp-Link C2

Tp-Link C20I

Referências · 3

• 🔥 https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html · Exploit
• https://osv.dev/vulnerability/CVE-2017-8217 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-8217 · Nota de Segurança