Vulnerability CVE-2017-8217


Published: 2017-04-25

Description:
TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n have too permissive iptables rules, e.g., SNMP is not blocked on any interface.

Type:

CWE-noinfo

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None
Affected software
Tp-link -> C20i firmware 
Tp-link -> C2 firmware 

 References:
https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.html

Copyright 2020, cxsecurity.com

 

Back to Top