CVE-2020-10231

HIGH

TP-Link NC200-NC450 Firmware - Remote NULL Pointer Dereference

Title source: llm
STIX 2.1

Description

TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1.3.0_Build_171205, NC260 through 1.5.1_Build_190805, and NC450 through 1.5.0_Build_181022 devices allow a remote NULL Pointer Dereference.

References (3)

Core 3
Core References
Exploit, Mailing List, Third Party Advisory x_refsource_misc
http://seclists.org/fulldisclosure/2020/Mar/54
Exploit, Mailing List, Patch, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2020/Apr/5

Scores

CVSS v3 7.5
EPSS 0.0140
EPSS Percentile 80.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-476
Status published
Products (17)
tp-link/nc200_firmware 2.1.6 160108_a (2 CPE variants)
tp-link/nc200_firmware 2.1.7 160315_a (2 CPE variants)
tp-link/nc200_firmware 2.1.8 171109
tp-link/nc210_firmware 1.0.9 171214
tp-link/nc220_firmware 1.1.12 160321_a (2 CPE variants)
tp-link/nc220_firmware 1.1.14 161219
tp-link/nc220_firmware 1.2.0 170516
tp-link/nc220_firmware 1.3.0 180105
tp-link/nc230_firmware 1.3.0 171205
tp-link/nc250_firmware 1.3.0 171205
... and 7 more
Published Apr 01, 2020
Tracked Since Feb 18, 2026