high8.8
CVE-2020-12111
Certain TP-Link devices allow Command Injection.
Impact
Certain TP-Link devices allow Command Injection. This affects NC260 1.5.2 build 200304 and NC450 1.5.3 build 200304.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Nc260 Firmware | Versions 1.0.5, 1.0.6, 1.4.1, 1.5.0, 1.5.2 |
| Tp-Link | Nc450 Firmware | Versions 1.0.15, 1.1.2, 1.3.4, 1.5.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/157533/TP-LINK-Cloud-Cameras-NCXXX-SetEncryptKey-Command-Injection.html
- https://seclists.org/fulldisclosure/2020/May/4
- https://www.tp-link.com/us/security
- http://packetstormsecurity.com/files/157533/TP-LINK-Cloud-Cameras-NCXXX-SetEncryptKey-Command-Injection.html
- https://seclists.org/fulldisclosure/2020/May/4
- https://www.tp-link.com/us/security