Lucene search

[email protected]CVE-2020-10231

HistoryApr 01, 2020 - 2:15 p.m.

CVE-2020-10231

2020-04-0114:15:14

CWE-476

[email protected]

web.nvd.nist.gov

cve-2020-10231

tp-link

nc200

nc210

nc220

nc230

nc250

nc260

nc450

security vulnerability

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.8%

JSON

TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1.3.0_Build_171205, NC260 through 1.5.1_Build_190805, and NC450 through 1.5.0_Build_181022 devices allow a remote NULL Pointer Dereference.

Affected configurations

NVD

Node

tp-linknc450_firmwareMatch1.1.1160928

tp-linknc450_firmwareMatch1.1.2161013

tp-linknc450_firmwareMatch1.1.6161124

tp-linknc450_firmwareMatch1.5.0181022

AND

tp-linknc450Match-

Node

tp-linknc260_firmwareMatch1.0.5160804

tp-linknc260_firmwareMatch1.0.6161114

tp-linknc260_firmwareMatch1.5.1190805

AND

tp-linknc260Match-

Node

tp-linknc250_firmwareMatch1.3.0171205

AND

tp-linknc250Match-

Node

tp-linknc230_firmwareMatch1.3.0171205

AND

tp-linknc230Match-

Node

tp-linknc220_firmwareMatch1.1.12160321_a

tp-linknc220_firmwareMatch1.1.12160321_b

tp-linknc220_firmwareMatch1.1.14161219

tp-linknc220_firmwareMatch1.2.0170516

tp-linknc220_firmwareMatch1.3.0180105

AND

tp-linknc220Match-

Node

tp-linknc210_firmwareMatch1.0.9171214

AND

tp-linknc210Match-

Node

tp-linknc200_firmwareMatch2.1.6160108_a

tp-linknc200_firmwareMatch2.1.6160108_b

tp-linknc200_firmwareMatch2.1.7160315_a

tp-linknc200_firmwareMatch2.1.7160315_b

tp-linknc200_firmwareMatch2.1.8171109

AND

tp-linknc200Match-

CPENameOperatorVersion
tp-link:nc450_firmwaretp-link nc450 firmwareeq1.1.1
tp-link:nc450_firmwaretp-link nc450 firmwareeq1.1.2
tp-link:nc450_firmwaretp-link nc450 firmwareeq1.1.6
tp-link:nc450_firmwaretp-link nc450 firmwareeq1.5.0

CPE	Name	Operator	Version
tp-link:nc450_firmware	tp-link nc450 firmware	eq	1.1.1
tp-link:nc450_firmware	tp-link nc450 firmware	eq	1.1.2
tp-link:nc450_firmware	tp-link nc450 firmware	eq	1.1.6
tp-link:nc450_firmware	tp-link nc450 firmware	eq	1.5.0

References

packetstormsecurity.com/files/157048/TP-LINK-Cloud-Cameras-NCXXX-Remote-NULL-Pointer-Dereference.html

seclists.org/fulldisclosure/2020/Apr/5

seclists.org/fulldisclosure/2020/Mar/54

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.8%

JSON

Related for CVE-2020-10231

zdt1 nvd1 prion1 cvelist1