CVE-2013-2573

Опубликовано: 29 янв. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Средний

Описание

A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code.

Ссылки

http://www.securityfocus.com/bid/60195
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/84574
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/cve/CVE-2013-2573
Third Party Advisory
VDB Entry
https://vuldb.com/?id.8912
Permissions Required
https://www.coresecurity.com/advisories/tp-link-IP-cameras-multiple-vulnerabilities
Exploit
Patch
Third Party Advisory
http://www.securityfocus.com/bid/60195
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/84574
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/cve/CVE-2013-2573
Third Party Advisory
VDB Entry
https://vuldb.com/?id.8912
Permissions Required
https://www.coresecurity.com/advisories/tp-link-IP-cameras-multiple-vulnerabilities
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tp-link:tl-sc_3130g_firmware:*:*:*:*:*:*:*:*

Версия до 1.6.18p12 (включая)

cpe:2.3:h:tp-link:tl-sc_3130g:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:tp-link:tl-sc_3171g_firmware:*:*:*:*:*:*:*:*

Версия до 1.6.18p12 (включая)

cpe:2.3:h:tp-link:tl-sc_3171g:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:tp-link:tl-sc_4171g_firmware:*:*:*:*:*:*:*:*

Версия до 1.6.18p12 (включая)

cpe:2.3:h:tp-link:tl-sc_4171g:-:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.22391

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-wr3w-r4pc-583x

github

почти 4 года назад

EPSS

Процентиль: 96%

0.22391

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78