PT-2020-11988

CVE-2020-10231

·

Published

2020-04-01

·

Updated

2020-05-12

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions TP-Link NC200 versions 2.1.8 Build 171109 and earlier TP-Link NC210 versions 1.0.9 Build 171214 and earlier TP-Link NC220 versions 1.3.0 Build 180105 and earlier TP-Link NC230 versions 1.3.0 Build 171205 and earlier TP-Link NC250 versions 1.3.0 Build 171205 and earlier TP-Link NC260 versions 1.5.1 Build 190805 and earlier TP-Link NC450 versions 1.5.0 Build 181022 and earlier
Description The issue allows a remote NULL Pointer Dereference. This means that an attacker could potentially cause a device to crash or become unstable by sending a specific type of request to the device.
Recommendations For TP-Link NC200 versions 2.1.8 Build 171109 and earlier, update to a version later than 2.1.8 Build 171109. For TP-Link NC210 versions 1.0.9 Build 171214 and earlier, update to a version later than 1.0.9 Build 171214. For TP-Link NC220 versions 1.3.0 Build 180105 and earlier, update to a version later than 1.3.0 Build 180105. For TP-Link NC230 versions 1.3.0 Build 171205 and earlier, update to a version later than 1.3.0 Build 171205. For TP-Link NC250 versions 1.3.0 Build 171205 and earlier, update to a version later than 1.3.0 Build 171205. For TP-Link NC260 versions 1.5.1 Build 190805 and earlier, update to a version later than 1.5.1 Build 190805. For TP-Link NC450 versions 1.5.0 Build 181022 and earlier, update to a version later than 1.5.0 Build 181022.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾