CVE-2020-12111

Certain TP-Link devices allow Command Injection. This affects NC260 1.5.2 build 200304 and NC450 1.5.3 build 200304...

CVE-2020-12111

TP-Link NC260 and NC450 web cameras are affected by CVE-2020-12111: a command-injection in the httpSetEncryptKeyRpm handler for /setEncryptKey.fcgi that allows a remote attacker with web access to execute commands as root. Affected versions are NC260 <= 1.5.2 build 200304 and NC450 <= 1.5.3...

CVE-2020-12110

TP-Link NCXXX Cloud Cameras (NC200, NC210, NC220, NC230, NC250, NC260, NC450) are affected by a hardcoded encryption key used to encrypt/decrypt config backups. The issue arises in swSystemBackup/swSystemRestoreFile using DES-ECB with modified s-boxes/permutation tables, enabling potential compro...

CVE-2020-12110

Certain TP-Link devices have a Hardcoded Encryption Key. This affects NC200 2.1.9 build 200225, N210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304...

PT-2020-13040 · Tp Link · Nc210 +6

Name of the Vulnerable Software and Affected Versions: TP-Link NC200 version 2.1.9 build 200225 TP-Link NC210 version 1.0.9 build 200304 TP-Link NC220 version 1.3.0 build 200304 TP-Link NC230 version 1.3.0 build 200304 TP-Link NC250 version 1.3.0 build 200304 TP-Link NC260 version 1.5.2 build...

TP-LINK Cloud Cameras NCXXX SetEncryptKey Command Injection

Vulnerability title: TP-LINK Cloud Cameras NCXXX SetEncryptKey Command Injection Author: Pietro Oliva CVE: CVE-2020-12111 Vendor: TP-LINK Product: NC260, NC450 Affected version: NC260 %s/%08X" 0x00491734 lw a1, EncryptKeyparam ; Attacker controlled string 0x00491738 lw a2, -0x7fd4gp 0x0049173c no...

Null pointer dereference

TP-Link NC200 through 2.1.8Build171109, NC210 through 1.0.9Build171214, NC220 through 1.3.0Build180105, NC230 through 1.3.0Build171205, NC250 through 1.3.0Build171205, NC260 through 1.5.1Build190805, and NC450 through 1.5.0Build181022 devices allow a remote NULL Pointer Dereference...

CVE-2020-10231

CVE-2020-10231 affects TP-Link NC200/NC210/NC220/NC230/NC250/NC260/NC450 cameras. The vulnerability resides in the httpLoginRpm path (login.fcgi) of the ipcamera binary: after a successful login, the code does not validate the return value of httpGetEnv(environment, "HTTP_USER_AGENT"), and if the...

CVE-2020-10231

TP-Link NC200 through 2.1.8Build171109, NC210 through 1.0.9Build171214, NC220 through 1.3.0Build180105, NC230 through 1.3.0Build171205, NC250 through 1.3.0Build171205, NC260 through 1.5.1Build190805, and NC450 through 1.5.0Build181022 devices allow a remote NULL Pointer Dereference...

TP-LINK Cloud Cameras NCXXX Remote NULL Pointer Dereference Vulnerability

Vulnerability title: TP-LINK Cloud Cameras NCXXX Remote NULL Pointer Dereference Author: Pietro Oliva CVE: CVE-2020-10231 Vendor: TP-LINK Product: NC200, NC210, NC220, NC230, NC250, NC260, NC450 Affected version: NC200 = 2.1.8 build 171109, NC210 = 1.0.9 build 171214, NC220 = 1.3.0 build 180105,...