Multiple TP-Link Camera Vulnerabilities Patched

guest · May 4, 2020

TP-Link Patches Multiple Vulnerabilities in NC Cloud Cameras
May 4, 2020
https://www.securityweek.com/tp-link-patches-multiple-vulnerabilities-nc-cloud-cameras

TP-Link has released firmware updates to address several vulnerabilities in its NC series cloud cameras, including bugs that could lead to the remote execution of arbitrary commands.

Tracked as CVE-2020-12111, the first of the command injection flaws impacts the NC260 and NC450 models and could be abused to remotely execute commands as root on affected devices.
The second command injection bug, CVE-2020-12109, impacts TP-Link NC200, NC210, NC220, NC230, NC250, NC260, and NC450 cloud cameras.
Click to expand...

In addition to these two vulnerabilities, TP-Link addressed a hardcoded encryption key issue in NC200, NC210, NC220, NC230, NC250, NC260, and NC450 device models.
Tracked as CVE-2020-12110, [...]

By exploiting this vulnerability, attackers could decrypt backup files and access sensitive data, including details such as alarm FTP server user and password, WLAN passphrase, PPPOE user and password, alarm SMTP server user and password, DDNS user and password.
While almost every camera model uses a different hardcoded key, these keys are easy to find [...]
Click to expand...

Log in or Sign up

Multiple TP-Link Camera Vulnerabilities Patched

guest Guest

Log in or Sign up

Multiple TP-Link Camera Vulnerabilities Patched

guest Guest

Useful Searches