PT-2020-13040 · Tp Link · Nc260+6

Pietro Oliva

·

Published

2020-05-04

·

Updated

2023-01-20

·

CVE-2020-12109

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions TP-Link NC200 version 2.1.9 build 200225 TP-Link NC210 version 1.0.9 build 200304 TP-Link NC220 version 1.3.0 build 200304 TP-Link NC230 version 1.3.0 build 200304 TP-Link NC250 version 1.3.0 build 200304 TP-Link NC260 version 1.5.2 build 200304 TP-Link NC450 version 1.5.3 build 200304
Description The issue allows Command Injection in certain TP-Link devices.
Recommendations For TP-Link NC200 version 2.1.9 build 200225, update to a newer version to mitigate the risk. For TP-Link NC210 version 1.0.9 build 200304, update to a newer version to mitigate the risk. For TP-Link NC220 version 1.3.0 build 200304, update to a newer version to mitigate the risk. For TP-Link NC230 version 1.3.0 build 200304, update to a newer version to mitigate the risk. For TP-Link NC250 version 1.3.0 build 200304, update to a newer version to mitigate the risk. For TP-Link NC260 version 1.5.2 build 200304, update to a newer version to mitigate the risk. For TP-Link NC450 version 1.5.3 build 200304, update to a newer version to mitigate the risk.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2020-12109

Affected Products

Nc200
Nc210
Nc220
Nc230
Nc250
Nc260
Nc450