CVE-2013-2579

Name of the Vulnerable Software and Affected Versions TP-Link IP Cameras versions prior to beta firmware LM.1.6.18P12 sign6

Description The issue concerns an empty password for a hardcoded account, allowing remote attackers to gain administrative access. This is achieved through a TELNET session, exploiting the qmik account that has an empty password.

Recommendations For versions prior to beta firmware LM.1.6.18P12 sign6, update to beta firmware LM.1.6.18P12 sign6 or later to resolve the issue. As a temporary workaround, consider disabling TELNET access until a patch is available. Restrict access to the administrative interface to minimize the risk of exploitation.