← Back

CVE-2018-11482

nvd nist
Published: May 30, 2018Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

/usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0oxKXL0 password.

Affected (4)

Tp Link
4 products
Ipc Tl Ipc223(p) 6 Firmware
Tl Ipc323k D Firmware
Tl Ipc325(kp) Firmware
Tl Ipc40a 4 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ipc Tl Ipc223(p) 6 Firmware
Before 1.0.21
Running on/withPlatform Versions
Tp Link
Ipc Tl Ipc223(p) 6
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tl Ipc323k D Firmware
Before 1.0.21
Running on/withPlatform Versions
Tp Link
Tl Ipc323k D
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tl Ipc325(kp) Firmware
Before 1.0.21
Running on/withPlatform Versions
Tp Link
Tl Ipc325(kp)
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Tl Ipc40a 4 Firmware
Before 1.0.21
Running on/withPlatform Versions
Tp Link
Tl Ipc40a 4
All versions

Related CWEs

CWE-798
Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

References (3)

Source: cve@mitre.org
Broken Link
Source: nvd@nist.gov
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link

Timeline

No history available yet.