high8.8
CVE-2018-11481
TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr…
Impact
TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua does not block various punctuation characters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Ipc Tl-Ipc223\(P\)-6 Firmware | before 1.0.21 |
| Tp-Link | Tl-Ipc323k-D Firmware | before 1.0.21 |
| Tp-Link | Tl-Ipc325\(Kp\) Firmware | before 1.0.21 |
| Tp-Link | Tl-Ipc40a-4 Firmware | before 1.0.21 |