CVE-2020-12111: OS Command Injection
First published: Mon May 04 2020(Updated: )
Certain TP-Link devices allow Command Injection. This affects NC260 1.5.2 build 200304 and NC450 1.5.3 build 200304.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tp-link Nc260 Firmware | =1.0.5-160804 | |
| Tp-link Nc260 Firmware | =1.0.6-161114 | |
| Tp-link Nc260 Firmware | =1.4.1-180720 | |
| Tp-link Nc260 Firmware | =1.5.0-181123 | |
| Tp-link Nc260 Firmware | =1.5.2-200304 | |
| Tp-link Nc260 | ||
| Tp-link Nc450 Firmware | =1.0.15-160920 | |
| Tp-link Nc450 Firmware | =1.1.2-161013 | |
| Tp-link Nc450 Firmware | =1.3.4-171130 | |
| Tp-link Nc450 Firmware | =1.5.3-200304 | |
| Tp-link Nc450 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-12111?
CVE-2020-12111 is a vulnerability that allows Command Injection in certain TP-Link devices.
Which TP-Link devices are affected by CVE-2020-12111?
NC260 1.5.2 build 200304 and NC450 1.5.3 build 200304 are affected by CVE-2020-12111.
What is the severity of CVE-2020-12111?
CVE-2020-12111 has a severity rating of 8.8 (critical).
How can I fix CVE-2020-12111?
To fix CVE-2020-12111, it is recommended to update the firmware of the affected devices to a version that is not vulnerable.
Where can I find more information about CVE-2020-12111?
For more information about CVE-2020-12111, you can refer to the following references: [Reference 1](http://packetstormsecurity.com/files/157533/TP-LINK-Cloud-Cameras-NCXXX-SetEncryptKey-Command-Injection.html), [Reference 2](https://seclists.org/fulldisclosure/2020/May/4), [Reference 3](https://www.tp-link.com/us/security).
- collector/nvd-index
- agent/weakness
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/tp-link
- canonical/tp-link nc260 firmware
- version/tp-link nc260 firmware/1.0.5-160804
- version/tp-link nc260 firmware/1.0.6-161114
- version/tp-link nc260 firmware/1.4.1-180720
- version/tp-link nc260 firmware/1.5.0-181123
- version/tp-link nc260 firmware/1.5.2-200304
- canonical/tp-link nc260
- canonical/tp-link nc450 firmware
- version/tp-link nc450 firmware/1.0.15-160920
- version/tp-link nc450 firmware/1.1.2-161013
- version/tp-link nc450 firmware/1.3.4-171130
- version/tp-link nc450 firmware/1.5.3-200304
- canonical/tp-link nc450