Lucene search

K
cveMitreCVE-2017-8219
HistoryApr 25, 2017 - 8:59 p.m.

CVE-2017-8219

2017-04-2520:59:00
CWE-20
mitre
web.nvd.nist.gov
25
cve-2017-8219
tp-link
c2
c20i
firmware
dos
http server
cookie header
cgi
ansi
nvd

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

32.6%

TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow DoSing the HTTP server via a crafted Cookie header to the /cgi/ansi URI.

Affected configurations

Nvd
Node
tp-linkc2_firmwareRange0.9.1_4.2_v0032.0_build_160706rel.37961n
AND
tp-linkc2Match-
Node
tp-linkc20i_firmwareRange0.9.1_4.2_v0032.0_build_160706rel.37961n
AND
tp-linkc20iMatch-
VendorProductVersionCPE
tp-linkc2_firmware*cpe:2.3:o:tp-link:c2_firmware:*:rel.37961n:*:*:*:*:*:*
tp-linkc2-cpe:2.3:h:tp-link:c2:-:*:*:*:*:*:*:*
tp-linkc20i_firmware*cpe:2.3:o:tp-link:c20i_firmware:*:rel.37961n:*:*:*:*:*:*
tp-linkc20i-cpe:2.3:h:tp-link:c20i:-:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

32.6%

Related for CVE-2017-8219