CVE-2013-2579: Critical severity tp-link tl-sc3130g vulnerability

Published Oct 11, 2013
·
Updated

TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12sign6 have an empty password for the hardcoded "qmik" account, which allows remote attackers to obtain administrative access via a TELNET session.

Affected Software

5 affected components
TP-Link TL-SC3130
TP-Link TL-SC3130G
TP-Link TL-SC3171
TP-Link TL-SC3171G
TP-Link Lm Firmware<=1.6.18p12_sign5

Event History

Oct 11, 2013
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2013-2579?

CVE-2013-2579 has a medium severity rating due to the presence of a hardcoded empty password allowing administrative access.

2

How do I fix CVE-2013-2579?

To fix CVE-2013-2579, update the firmware of affected TP-Link camera models to the latest version that resolves the vulnerability.

3

Which TP-Link models are affected by CVE-2013-2579?

CVE-2013-2579 affects TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, among possibly others.

4

Can CVE-2013-2579 be exploited remotely?

Yes, CVE-2013-2579 can be exploited remotely via a TELNET session due to the hardcoded empty password.

5

Is there a risk of unauthorized access from CVE-2013-2579?

Yes, CVE-2013-2579 poses a significant risk of unauthorized access, allowing attackers to take over the camera's administrative functions.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203