Certain TP-Link devices allow Command Injection. This affects NC200 2.1.9 build 200225, NC210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304.

Certain TP-Link devices have a Hardcoded Encryption Key. This affects NC200 2.1.9 build 200225, N210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304.

TP-Link NC200 through 2.1.8Build171109, NC210 through 1.0.9Build171214, NC220 through 1.3.0Build180105, NC230 through 1.3.0Build171205, NC250 through 1.3.0Build171205, NC260 through 1.5.1Build190805, and NC450 through 1.5.0Build181022 devices allow a remote NULL Pointer Dereference.