1. Home
  2. CVE Database
  3. CVE-2020-11445
MEDIUM · 5.3

CVE-2020-11445

TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involving a Wi-Fi session with GPS enabled, aka CNVD-2020-04855.

Vulnerability Description

TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involving a Wi-Fi session with GPS enabled, aka CNVD-2020-04855.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Tp-LinkNc450 Firmware<= 2020-02-09
Tp-LinkNc450-
Tp-LinkNc260 Firmware<= 2020-02-09
Tp-LinkNc260-
Tp-LinkNc250 Firmware<= 2020-02-09
Tp-LinkNc250-
Tp-LinkNc230 Firmware<= 2020-02-09
Tp-LinkNc230-
Tp-LinkNc220 Firmware<= 2020-02-09
Tp-LinkNc220-
Tp-LinkNc210 Firmware<= 2020-02-09
Tp-LinkNc210-
Tp-LinkNc200 Firmware<= 2020-02-09
Tp-LinkNc200-
Tp-LinkKc300S2 Firmware<= 2020-02-09
Tp-LinkKc300S2-
Tp-LinkKc310S2 Firmware<= 2020-02-09
Tp-LinkKc310S2-
Tp-LinkKc200 Firmware<= 2020-02-09
Tp-LinkKc200-

References

FAQ

What is CVE-2020-11445?

CVE-2020-11445 is a vulnerability with a CVSS score of 5.3 (MEDIUM). TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involving a Wi-Fi session with GPS enabled, aka CNVD-2020-04855.

How severe is CVE-2020-11445?

CVE-2020-11445 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-11445?

Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Nc450 Firmware, Tp-Link Nc450, Tp-Link Nc260 Firmware, Tp-Link Nc260, Tp-Link Nc250 Firmware.