CVE-2020-10231: Null Pointer Dereference

Published Apr 1, 2020

Updated

TP-Link NC200 through 2.1.8Build171109, NC210 through 1.0.9Build171214, NC220 through 1.3.0Build180105, NC230 through 1.3.0Build171205, NC250 through 1.3.0Build171205, NC260 through 1.5.1Build190805, and NC450 through 1.5.0Build181022 devices allow a remote NULL Pointer Dereference.

Affected Software

27 affected components

TP-Link Nc450 Firmware=1.1.1-160928

TP-Link Nc450 Firmware=1.1.2-161013

TP-Link Nc450 Firmware=1.1.6-161124

TP-Link Nc450 Firmware=1.5.0-181022

TP-Link NC450

TP-Link Nc260 Firmware=1.0.5-160804

TP-Link Nc260 Firmware=1.0.6-161114

TP-Link Nc260 Firmware=1.5.1-190805

TP-Link NC260

TP-Link Nc250 Firmware=1.3.0-171205

TP-Link NC250

TP-Link Nc230 Firmware=1.3.0-171205

TP-Link NC230

TP-Link Nc220 Firmware=1.1.12-160321_a

TP-Link Nc220 Firmware=1.1.12-160321_b

TP-Link Nc220 Firmware=1.1.14-161219

TP-Link Nc220 Firmware=1.2.0-170516

TP-Link Nc220 Firmware=1.3.0-180105

TP-Link NC220

TP-Link Nc210 Firmware=1.0.9-171214

TP-Link NC210

TP-Link Nc200 Firmware=2.1.6-160108_a

TP-Link Nc200 Firmware=2.1.6-160108_b

TP-Link Nc200 Firmware=2.1.7-160315_a

TP-Link Nc200 Firmware=2.1.7-160315_b

TP-Link Nc200 Firmware=2.1.8-171109

TP-Link NC200

Remediation

Patch Available

http://seclists.org/fulldisclosure/2020/Apr/5

Event History

Apr 1, 2020

CVE Published

via MITRE·01:57 PM

Data Sourced

via MITRE·01:57 PM

Description

Frequently Asked Questions

What is the vulnerability ID for this TP-Link vulnerability?

The vulnerability ID for this TP-Link vulnerability is CVE-2020-10231.

Which TP-Link devices are affected by this vulnerability?

TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1.3.0_Build_171205, NC260 through 1.5.1_Build_190805, and NC450 through 1.5.0_Build_181022 devices are affected by this vulnerability.

What is the severity of CVE-2020-10231?

The severity of CVE-2020-10231 is high with a severity value of 7.5.

What is the CWE ID associated with this vulnerability?

The CWE ID associated with this vulnerability is CWE-476.

How do I fix the vulnerability CVE-2020-10231?

To fix the vulnerability CVE-2020-10231, it is recommended to update the firmware of the affected TP-Link devices to the latest version provided by the manufacturer.