1. Home
  2. CVE Database
  3. CVE-2013-2578
HIGH · 10.0

CVE-2013-2578

cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitra...

Vulnerability Description

cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerName parameter and (2) other unspecified parameters.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
Tp-LinkTl-Sc3130-
Tp-LinkTl-Sc3130G-
Tp-LinkTl-Sc3171-
Tp-LinkTl-Sc3171G-
Tp-LinkLm Firmware<= 1.6.18p12_sign5

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2013-2578?

CVE-2013-2578 is a vulnerability with a CVSS score of 10.0 (HIGH). cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitra...

How severe is CVE-2013-2578?

CVE-2013-2578 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-2578?

Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Tl-Sc3130, Tp-Link Tl-Sc3130G, Tp-Link Tl-Sc3171, Tp-Link Tl-Sc3171G, Tp-Link Lm Firmware.