high7.5
CVE-2020-10231
TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1…
Impact
TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1.3.0_Build_171205, NC260 through 1.5.1_Build_190805, and NC450 through 1.5.0_Build_181022 devices allow a remote NULL Pointer Dereference.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Nc450 Firmware | Versions 1.1.1, 1.1.2, 1.1.6, 1.5.0 |
| Tp-Link | Nc260 Firmware | Versions 1.0.5, 1.0.6, 1.5.1 |
| Tp-Link | Nc250 Firmware | Version 1.3.0 |
| Tp-Link | Nc230 Firmware | Version 1.3.0 |
| Tp-Link | Nc220 Firmware | Versions 1.1.12, 1.1.14, 1.2.0, 1.3.0 |
| Tp-Link | Nc210 Firmware | Version 1.0.9 |
| Tp-Link | Nc200 Firmware | Versions 2.1.6, 2.1.7, 2.1.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/157048/TP-LINK-Cloud-Cameras-NCXXX-Remote-NULL-Pointer-Dereference.html
- http://seclists.org/fulldisclosure/2020/Apr/5
- http://seclists.org/fulldisclosure/2020/Mar/54
- http://packetstormsecurity.com/files/157048/TP-LINK-Cloud-Cameras-NCXXX-Remote-NULL-Pointer-Dereference.html
- http://seclists.org/fulldisclosure/2020/Apr/5
- http://seclists.org/fulldisclosure/2020/Mar/54