CVE-2023-49515

Опубликовано: 17 янв. 2024

Источник: nvd

CVSS3: 4.6

EPSS Низкий

Описание

Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allows a physically proximate attacker to obtain sensitive information via a connection to the UART pin components.

Ссылки

https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART
Exploit
Third Party Advisory
https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART/tree/master
Exploit
Third Party Advisory
https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART
Exploit
Third Party Advisory
https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART/tree/master
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:tp-link:tapo_c200_firmware:1.1.22:*:*:*:*:*:*:*

cpe:2.3:o:tp-link:tapo_c200_firmware:1.3.4:*:*:*:*:*:*:*

cpe:2.3:o:tp-link:tapo_c200_firmware:1.3.9:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tapo_c200:3:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:o:tp-link:tapo_tc70_firmware:1.1.22:*:*:*:*:*:*:*

cpe:2.3:o:tp-link:tapo_tc70_firmware:1.3.4:*:*:*:*:*:*:*

cpe:2.3:o:tp-link:tapo_tc70_firmware:1.3.9:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tapo_tc70:3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 30%

0.00111

Низкий

4.6 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-922

Связанные уязвимости

GHSA-983x-5446-qc2q

CVSS3: 4.6

github

около 2 лет назад

BDU:2024-00495

CVSS3: 2.1

fstec