CVE-2017-2111: CRLF Injection

Published Apr 28, 2017
·
Updated

HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier, TS-PTCAM/POE firmware version 1.18 and earlier may allow a remote attackers to display false information.

Affected Software

14 affected components
Iodata Ts-ptcam\/poe Firmware<=1.18
Iodata Ts-ptcam\/poe
Iodata Ts-ptcam Firmware<=1.18
Iodata Ts-ptcam
Iodata Ts-wrlc Firmware<=1.17
Iodata Ts-wrlc
Iodata Ts-wlc2 Firmware<=1.18
Iodata Ts-wlc2
Iodata Ts-wlce Firmware<=1.18
Iodata Ts-wlce
Iodata Ts-wptcam2 Firmware=1.00
Iodata Ts-wptcam2
Iodata Ts-wptcam Firmware<=1.18
Iodata Ts-wptcam

Event History

Apr 28, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2017-2111?

CVE-2017-2111 is considered to be of medium severity due to its potential exploitation via HTTP header injection.

2

How do I fix CVE-2017-2111?

To fix CVE-2017-2111, update the affected firmware versions to the latest releases provided by Iodata.

3

Which devices are affected by CVE-2017-2111?

CVE-2017-2111 affects various Iodata devices such as TS-WPTCAM, TS-WPTCAM2, TS-WLCE, TS-WLC2, TS-WRLC, and TS-PTCAM with specified firmware versions.

4

What kind of vulnerability is CVE-2017-2111?

CVE-2017-2111 is classified as an HTTP header injection vulnerability, which can allow an attacker to manipulate HTTP headers.

5

Is there a known exploit for CVE-2017-2111?

As of now, no specific exploit details for CVE-2017-2111 have been publicly disclosed, but the vulnerability poses potential risks to affected devices.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203