critical9.8
CVE-2018-11482
/usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0oxKXL0 password.
Impact
/usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0oxKXL0 password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Ipc Tl-Ipc223\(P\)-6 Firmware | before 1.0.21 |
| Tp-Link | Tl-Ipc323k-D Firmware | before 1.0.21 |
| Tp-Link | Tl-Ipc325\(Kp\) Firmware | before 1.0.21 |
| Tp-Link | Tl-Ipc40a-4 Firmware | before 1.0.21 |