Code injection

2017-04-2520:59:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.7%

JSON

TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow DoSing the HTTP server via a crafted Cookie header to the /cgi/ansi URI.

CPENameOperatorVersion
c20i_firmwareeq<= 0.9.14.2v32.0build160706
c2_firmwareeq<= 0.9.14.2v32.0build160706

CPE	Name	Operator	Version
	c20i_firmware	eq	<= 0.9.14.2v32.0build160706
	c2_firmware	eq	<= 0.9.14.2v32.0build160706

References

pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html