Vulnerability Description
TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1.3.0_Build_171205, NC260 through 1.5.1_Build_190805, and NC450 through 1.5.0_Build_181022 devices allow a remote NULL Pointer Dereference.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Nc450 Firmware | 1.1.1 |
| Tp-Link | Nc450 | - |
| Tp-Link | Nc260 Firmware | 1.0.5 |
| Tp-Link | Nc260 | - |
| Tp-Link | Nc250 Firmware | 1.3.0 |
| Tp-Link | Nc250 | - |
| Tp-Link | Nc230 Firmware | 1.3.0 |
| Tp-Link | Nc230 | - |
| Tp-Link | Nc220 Firmware | 1.1.12 |
| Tp-Link | Nc220 | - |
| Tp-Link | Nc210 Firmware | 1.0.9 |
| Tp-Link | Nc210 | - |
| Tp-Link | Nc200 Firmware | 2.1.6 |
| Tp-Link | Nc200 | - |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/157048/TP-LINK-Cloud-Cameras-NCXXX-Remote-NExploitThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2020/Apr/5ExploitMailing ListPatch
- http://seclists.org/fulldisclosure/2020/Mar/54ExploitMailing ListThird Party Advisory
- http://packetstormsecurity.com/files/157048/TP-LINK-Cloud-Cameras-NCXXX-Remote-NExploitThird Party AdvisoryVDB Entry
- http://seclists.org/fulldisclosure/2020/Apr/5ExploitMailing ListPatch
- http://seclists.org/fulldisclosure/2020/Mar/54ExploitMailing ListThird Party Advisory
FAQ
What is CVE-2020-10231?
CVE-2020-10231 is a vulnerability with a CVSS score of 7.5 (HIGH). TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1.3.0_Build_171205, NC260 through 1.5.1_Bu...
How severe is CVE-2020-10231?
CVE-2020-10231 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-10231?
Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Nc450 Firmware, Tp-Link Nc450, Tp-Link Nc260 Firmware, Tp-Link Nc260, Tp-Link Nc250 Firmware.