Description
cgi-bin/firmwareupgrade in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to modify the firmware revision via a "preset" action.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Core Security · textwebappshardware
https://www.exploit-db.com/exploits/27289
References (2)
Core 2
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/54155
Exploit x_refsource_misc
http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras
Scores
EPSS
0.1648
EPSS Percentile
94.9%
Details
CWE
CWE-264
Status
published
Products (5)
tp-link/lm_firmware
< 1.6.18p12_sign5
tp-link/tl-sc3130
tp-link/tl-sc3130g
tp-link/tl-sc3171
tp-link/tl-sc3171g
Published
Oct 11, 2013
Tracked Since
Feb 18, 2026