PT-2024-8637
CVE-2024-48288
·
Published
2024-11-21
·
Updated
2024-11-26
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
TP-Link TL-IPC42C version V4.0 20211227 1.0.16
Description
The issue is related to command injection due to the lack of malicious code verification on both the frontend and backend. This allows a remote attacker to execute arbitrary code by sending specially crafted HTTP packets.
Recommendations
For TP-Link TL-IPC42C version V4.0 20211227 1.0.16, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾