C2 Firmware (Tp-link) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2017-04-25. Vendor: Tp-link.

CVEs of C2 Firmware

• CVE-2017-8220 - CVSS 9.9 (critical), 2017-04-25: TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP request by placing shell…
• CVE-2017-8219 - CVSS 6.5 (medium), 2017-04-25: TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow DoSing the HTTP server via a crafted Cookie header to the…
• CVE-2017-8218 - CVSS 9.8 (critical), 2017-04-25: vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a…
• CVE-2017-8217 - CVSS 5.3 (medium), 2017-04-25: TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n have too permissive iptables rules, e.g., SNMP is not blocked on any…