CVE-2013-2581

Name of the Vulnerable Software and Affected Versions TP-Link IP Cameras versions prior to beta firmware LM.1.6.18P12 sign6

Description The issue allows remote attackers to modify the firmware revision. This is achieved through the cgi-bin/firmwareupgrade endpoint, by utilizing a "preset" action. The affected models include TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models.

Recommendations For versions prior to beta firmware LM.1.6.18P12 sign6, update to beta firmware LM.1.6.18P12 sign6 or later to resolve the issue. As a temporary workaround, consider restricting access to the cgi-bin/firmwareupgrade endpoint to minimize the risk of exploitation.