Authentication flaw

2020-04-0104:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%

JSON

TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involving a Wi-Fi session with GPS enabled, aka CNVD-2020-04855.

CPENameOperatorVersion
kc200_firmwareeq<= 202029
kc300s2_firmwareeq<= 202029
kc310s2_firmwareeq<= 202029
nc200_firmwareeq<= 202029
nc210_firmwareeq<= 202029
nc220_firmwareeq<= 202029
nc230_firmwareeq<= 202029
nc250_firmwareeq<= 202029
nc260_firmwareeq<= 202029
nc450_firmwareeq<= 202029

Name	Operator	Version
kc200_firmware	eq	<= 202029
kc300s2_firmware	eq	<= 202029
kc310s2_firmware	eq	<= 202029
nc200_firmware	eq	<= 202029
nc210_firmware	eq	<= 202029
nc220_firmware	eq	<= 202029
nc230_firmware	eq	<= 202029
nc250_firmware	eq	<= 202029
nc260_firmware	eq	<= 202029
nc450_firmware	eq	<= 202029

Rows per page:

1-10 of 151

References

www.cnvd.org.cn/flaw/show/1916613