Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2020-12109

🗓️ 04 May 2020 15:06:51Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 131 Views🌐 WEB

TP-Link devices allow Command Injection affecting multiple model

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today		TP-LINK Cloud Cameras NCXXX Bonjour Command Injection Vulnerability
6 May 202000:00
–zdt
0day.today		TP-Link Cloud Cameras NCXXX Bonjour Command Injection Exploit
19 Sep 202000:00
–zdt
Circl		CVE-2020-12109
18 Sep 202014:58
–circl
CNVD		TP-LINK Cloud Cameras NCXXX Series License RCE Vulnerability
5 May 202000:00
–cnvd
Check Point Advisories		TP-LINK Cloud Cameras Command Injection (CVE-2020-12111; CVE-2020-12109)
17 May 202000:00
–checkpoint_advisories
Check Point Advisories		TP-LINK Cloud Cameras Command Injection (CVE-2020-12109)
7 Oct 202000:00
–checkpoint_advisories
Cvelist		CVE-2020-12109
4 May 202015:06
–cvelist
Metasploit		TP-Link Cloud Cameras NCXXX Bonjour Command Injection
18 Sep 202017:41
–metasploit
NVD		CVE-2020-12109
4 May 202016:15
–nvd
Packet Storm		TP-LINK Cloud Cameras NCXXX Bonjour Command Injection
1 May 202000:00
–packetstorm
Rows per page
NVD
Node
tp-linknc200_firmwareMatch2.1.6160108_b
OR
tp-linknc200_firmwareMatch2.1.9200225
AND
tp-linknc200Match-
Node
tp-linknc210_firmwareMatch1.0.3160229
OR
tp-linknc210_firmwareMatch1.0.4160412
OR
tp-linknc210_firmwareMatch1.0.9200304
AND
tp-linknc210Match-
Node
tp-linknc220_firmwareMatch1.2.0170516
OR
tp-linknc220_firmwareMatch1.3.0180105
OR
tp-linknc220_firmwareMatch1.3.0200304
AND
tp-linknc220Match-
Node
tp-linknc230_firmwareMatch1.0.3160108
OR
tp-linknc230_firmwareMatch1.2.1170515
OR
tp-linknc230_firmwareMatch1.3.0200304
AND
tp-linknc230Match-
Node
tp-linknc250_firmwareMatch1.0.8160108
OR
tp-linknc250_firmwareMatch1.0.10160321
OR
tp-linknc250_firmwareMatch1.2.1170515
OR
tp-linknc250_firmwareMatch1.3.0200304
AND
tp-linknc250Match-
Node
tp-linknc260_firmwareMatch1.0.5160804
OR
tp-linknc260_firmwareMatch1.0.6161114
OR
tp-linknc260_firmwareMatch1.4.1180720
OR
tp-linknc260_firmwareMatch1.5.0181123
OR
tp-linknc260_firmwareMatch1.5.2200304
AND
tp-linknc260Match-
Node
tp-linknc450_firmwareMatch1.0.15160920
OR
tp-linknc450_firmwareMatch1.1.2161013
OR
tp-linknc450_firmwareMatch1.3.4171130
OR
tp-linknc450_firmwareMatch1.5.3200304
AND
tp-linknc450Match-
ParameterPositionPathDescriptionCWE
sysnamerequest body/setsysname.fcgiRemote command injection via POST to /setsysname.fcgi by injecting shell metacharacters in the sysname parameter, leading to root shell on affected devices.CWE-78
tokenrequest body/setsysname.fcgiRemote command injection via POST to /setsysname.fcgi by injecting shell metacharacters in the sysname parameter, leading to root shell on affected devices.CWE-78

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
21 Nov 2024 04:59Current
8.7High risk
Vulners AI Score8.7
CVSS 3.18.8
CVSS 29
EPSS0.81611
CWE-78
cve-2020-12109command injectiontp-linknc200nc210nc220nc230nc250nc260nc450vulnerability
131