1. Home
  2. CVE Database
  3. CVE-2013-2580
HIGH · 7.1

CVE-2013-2580

Unrestricted file upload vulnerability in cgi-bin/uploadfile in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6, allo...

Vulnerability Description

Unrestricted file upload vulnerability in cgi-bin/uploadfile in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6, allows remote attackers to upload arbitrary files, then accessing it via a direct request to the file in the mnt/mtd directory.

CVSS Score

7.1

HIGH

AV:N/AC:M/Au:N/C:N/I:C/A:N
Confidentiality
NONE
Integrity
COMPLETE
Availability
NONE

Affected Products

VendorProductVersions
Tp-LinkTl-Sc3130-
Tp-LinkTl-Sc3130G-
Tp-LinkTl-Sc3171-
Tp-LinkTl-Sc3171G-
Tp-LinkLm Firmware<= 1.6.18p12_sign5

References

FAQ

What is CVE-2013-2580?

CVE-2013-2580 is a vulnerability with a CVSS score of 7.1 (HIGH). Unrestricted file upload vulnerability in cgi-bin/uploadfile in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6, allo...

How severe is CVE-2013-2580?

CVE-2013-2580 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-2580?

Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Tl-Sc3130, Tp-Link Tl-Sc3130G, Tp-Link Tl-Sc3171, Tp-Link Tl-Sc3171G, Tp-Link Lm Firmware.