CVE-2020-12109

Certain TP-Link devices allow Command Injection. This affects NC200 2.1.9 build 200225, NC210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304...

EUVD-2020-12109

Malware in sbrugna...

TP-LINK Cloud Cameras Command Injection (CVE-2020-12109)

A command injection vulnerability exists in TP-LINK Cloud Cameras. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-12109

creationtimestamp| type| source ---|---|--- 2020-09-18 14:58:24+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/tplinkncxxxbonjourcommandinjection.rb 2024-11-14 06:07:14+00:00| seen| MISP/31e52c3d-a86d-4dbc-b75d-9d1508fba5b9 2025-02-06...

TP-LINK Cloud Cameras Command Injection (CVE-2020-12111; CVE-2020-12109)

A command injection vulnerability exists in TP-LINK cloud cameras. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-12109

TP-Link Cloud Cameras NCXXX series (NC200/NC210/NC220/NC230/NC250/NC260/NC450) are affected by CVE-2020-12109. An authenticated command-injection weakness exists in the NCXXX line, where the system name (used in shell commands) can be leveraged via swBonjourStartHTTP to execute arbitrary commands...

TP-LINK Cloud Cameras NCXXX Bonjour Command Injection

Vulnerability title: TP-LINK Cloud Cameras NCXXX Bonjour Command Injection Author: Pietro Oliva CVE: CVE-2020-12109 Vendor: TP-LINK Product: NC200, NC210, NC220, NC230, NC250, NC260, NC450 Affected version: NC200 = 2.1.9 build 200225, NC210 = 1.0.9 build 200304, NC220 = 1.3.0 build 200304, NC230 ...