CVE-2013-2579

Published Oct 11, 2013

Last updated 11 years ago

Overview

Description: TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 have an empty password for the hardcoded "qmik" account, which allows remote attackers to obtain administrative access via a TELNET session.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-255

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:tp-link:tl-sc3130:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9A687292-110A-44B6-91E0-0FA9AA954D1B"
          },
          {
            "criteria": "cpe:2.3:h:tp-link:tl-sc3130g:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FDCDA0C1-4A25-4BD6-8F8C-875D488295CB"
          },
          {
            "criteria": "cpe:2.3:h:tp-link:tl-sc3171:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9DC0738C-300C-4CD4-BB93-AECC15356CB1"
          },
          {
            "criteria": "cpe:2.3:h:tp-link:tl-sc3171g:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "51BA2347-A4EC-45DF-B05A-7806E62FEC3B"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:tp-link:lm_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8AA9253C-5276-49A9-9097-D9B137829FE8",
            "versionEndIncluding": "1.6.18p12_sign5"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References