CVE-2013-2580

Published: Oct 11, 2013Modified: Apr 29, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:C/A:N

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

Unrestricted file upload vulnerability in cgi-bin/uploadfile in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6, allows remote attackers to upload arbitrary files, then accessing it via a direct request to the file in the mnt/mtd directory.

Affected (5)

Products: Tp Link: Tl Sc3130, Tl Sc3130g, Tl Sc3171, Tl Sc3171g, Lm Firmware

5 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Tp Link Tl Sc3130	All versions
Tp Link Tl Sc3130g	All versions
Tp Link Tl Sc3171	All versions
Tp Link Tl Sc3171g	All versions
Tp Link Lm Firmware	Up to 1.6.18p12_sign5

References (2)

http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras

Source: cve@mitre.org

Exploit

http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.