PT-2017-18221 · Tp Link · Tp-Link C2+1

Pierre Kim · Published 2017-04-25 · Updated 2020-08-24 · CVE-2017-8217

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n

Description The issue is related to too permissive iptables rules. For example, SNMP is not blocked on any interface, which could pose a security risk.

Recommendations For TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n, consider restricting access to SNMP on all interfaces until a firmware update with corrected iptables rules is available.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2017-8217

Affected Products

Tp-Link C2

Tp-Link C20I

References · 3

• 🔥 https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html · Exploit
• https://osv.dev/vulnerability/CVE-2017-8217 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-8217 · Security Note