CVE-2018-11481

🗓️ 30 May 2018 21:29:00Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 13 Views

TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data.

Reporter	Title	Published	Views	Family All 6
CNVD	Remote Code Execution Vulnerability in Multiple TP-LINK Products	1 Jun 201800:00	–	cnvd
CVE	CVE-2018-11481	30 May 201821:00	–	cve
Cvelist	CVE-2018-11481	30 May 201821:00	–	cvelist
EUVD	EUVD-2018-3512	7 Oct 202500:30	–	euvd
OSV	CVE-2018-11481	30 May 201821:29	–	osv
Prion	Remote code execution	30 May 201821:29	–	prion

NVD

Node

tp-link ipc_tl-ipc223(p)-6_firmwareRange<1.0.21

AND

tp-link ipc_tl-ipc223(p)-6Match-

Node

tp-link tl-ipc323k-d_firmwareRange<1.0.21

AND

tp-link tl-ipc323k-dMatch-

Node

tp-link tl-ipc325(kp)_firmwareRange<1.0.21

AND

tp-link tl-ipc325(kp)Match-

Node

tp-link tl-ipc40a-4_firmwareRange<1.0.21

AND

tp-link tl-ipc40a-4Match-

Source	Link
github	www.github.com/yough3rt/IOT-pwn-for-fun/blob/master/TP-LINK-websys-Authenticated-RCE

21 Nov 2024 03:43Current

9High risk

Vulners AI Score9

CVSS 26.5

CVSS 38.8

EPSS0.01677

tp-link ipc tl-ipc223(p)-6 tl-ipc323k-d tl-ipc325(kp)-*tl-ipc40a-4 authenticated remote code execution crafted json data punctuation characters lua validator