← Back

Tl Ipc325(kp) Firmware

tl-ipc325(kp)_firmware

Vendor: Tp Link • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-11482
1Tp Link
4Ipc Tl Ipc223(p) 6 Firmware
Tl Ipc323k D FirmwareTl Ipc325(kp) Firmware+1 more
Nov 21, 2024
May 30, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
/usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0oxKXL0 password.
CVE-2018-11481
1Tp Link
4Ipc Tl Ipc223(p) 6 Firmware
Tl Ipc323k D FirmwareTl Ipc325(kp) Firmware+1 more
Nov 21, 2024
May 30, 2018
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua does not block various...Show more
TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua does not block various punctuation characters.Show less