Lucene search

[email protected]CVE-2013-2573

HistoryJan 29, 2020 - 7:15 p.m.

CVE-2013-2573

2020-01-2919:15:00

CWE-78

[email protected]

web.nvd.nist.gov

cve-2013-2573

command injection

tp-link

ip cameras

security vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.193 Low

EPSS

Percentile

96.3%

JSON

A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code.

CPENameOperatorVersion
tp-link:tl-sc_3130g_firmwaretp-link tl-sc 3130g firmwarele1.6.18p12
tp-link:tl-sc_3171g_firmwaretp-link tl-sc 3171g firmwarele1.6.18p12
tp-link:tl-sc_4171g_firmwaretp-link tl-sc 4171g firmwarele1.6.18p12

CPE	Name	Operator	Version
tp-link:tl-sc_3130g_firmware	tp-link tl-sc 3130g firmware	le	1.6.18p12
tp-link:tl-sc_3171g_firmware	tp-link tl-sc 3171g firmware	le	1.6.18p12
tp-link:tl-sc_4171g_firmware	tp-link tl-sc 4171g firmware	le	1.6.18p12