CVE-2013-2573

Katalog CVE

CVSS 9.8 · Critical EPSS 42,2%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada tp-link tl-sc 3130g firmware, tp-link tl-sc 3171g firmware +1 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code.

Rincian

Terbit di NVD

29 Januari 2020

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

42,2% peluang dieksploitasi; lebih tinggi dari 98,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.coresecurity.com/advisories/tp-link-IP-cameras-multiple-vulnerabilities exploit · patch · advisory pihak ketiga
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84574 advisory pihak ketiga · vdb entry
• https://packetstormsecurity.com/files/cve/CVE-2013-2573 advisory pihak ketiga · vdb entry
• http://www.securityfocus.com/bid/60195 broken link
• https://vuldb.com/?id.8912 permissions required