critical
9
CWE
78 77
Advisory Published
Updated

CVE-2020-12109: OS Command Injection

First published: Mon May 04 2020(Updated: )

Certain TP-Link devices allow Command Injection. This affects NC200 2.1.9 build 200225, NC210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Tp-link Nc200 Firmware=2.1.6-160108_b
Tp-link Nc200 Firmware=2.1.9-200225
TP-LINK NC200
Tp-link Nc210 Firmware=1.0.3-160229
Tp-link Nc210 Firmware=1.0.4-160412
Tp-link Nc210 Firmware=1.0.9-200304
Tp-link Nc210
Tp-link Nc220 Firmware=1.2.0-170516
Tp-link Nc220 Firmware=1.3.0-180105
Tp-link Nc220 Firmware=1.3.0-200304
Tp-link Nc220
Tp-link Nc230 Firmware=1.0.3-160108
Tp-link Nc230 Firmware=1.2.1-170515
Tp-link Nc230 Firmware=1.3.0-200304
Tp-link Nc230
Tp-link Nc250 Firmware=1.0.8-160108
Tp-link Nc250 Firmware=1.0.10-160321
Tp-link Nc250 Firmware=1.2.1-170515
Tp-link Nc250 Firmware=1.3.0-200304
TP-Link NC250
Tp-link Nc260 Firmware=1.0.5-160804
Tp-link Nc260 Firmware=1.0.6-161114
Tp-link Nc260 Firmware=1.4.1-180720
Tp-link Nc260 Firmware=1.5.0-181123
Tp-link Nc260 Firmware=1.5.2-200304
Tp-link Nc260
Tp-link Nc450 Firmware=1.0.15-160920
Tp-link Nc450 Firmware=1.1.2-161013
Tp-link Nc450 Firmware=1.3.4-171130
Tp-link Nc450 Firmware=1.5.3-200304
Tp-link Nc450

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is CVE-2020-12109?

    CVE-2020-12109 is a vulnerability that allows Command Injection in certain TP-Link devices.

  • Which TP-Link devices are affected by CVE-2020-12109?

    The TP-Link devices affected by CVE-2020-12109 are NC200 2.1.9 build 200225, NC210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304.

  • What is the severity of CVE-2020-12109?

    CVE-2020-12109 has a severity rating of 8.8 (Critical).

  • How can I fix CVE-2020-12109?

    To fix CVE-2020-12109, update the firmware of the affected TP-Link devices to the latest available version.

  • Where can I find more information about CVE-2020-12109?

    You can find more information about CVE-2020-12109 on the following URLs: [1] http://packetstormsecurity.com/files/157531/TP-LINK-Cloud-Cameras-NCXXX-Bonjour-Command-Injection.html [2] http://packetstormsecurity.com/files/159222/TP-Link-Cloud-Cameras-NCXXX-Bonjour-Command-Injection.html [3] https://seclists.org/fulldisclosure/2020/May/2

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203