CVE-2013-3688

Published: Oct 1, 2013Modified: Apr 29, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

The TP-Link IP Cameras TL-SC3171, TL-SC3130, TL-SC3130G, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6, does not properly restrict access to certain administrative functions, which allows remote attackers to (1) cause a denial of service (device reboot) via a request to cgi-bin/reboot or (2) cause a denial of service (reboot and reset to factory defaults) via a request to cgi-bin/hardfactorydefault.

Affected (5)

Products: Tp Link: Tl Sc3130, Tl Sc3130g, Tl Sc3171, Tl Sc3171g, Lm Firmware

5 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Tp Link Tl Sc3130	All versions
Tp Link Tl Sc3130g	All versions
Tp Link Tl Sc3171	All versions
Tp Link Tl Sc3171g	All versions
Tp Link Lm Firmware	Up to 1.6.18p12_sign5

Related CWEs

CWE-264

References (4)

http://seclists.org/fulldisclosure/2013/Jun/84

Source: cve@mitre.org

http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras

Source: cve@mitre.org

Exploit

http://seclists.org/fulldisclosure/2013/Jun/84

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.