CVE-2013-2573

EPSS 42.2%

A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/cve/CVE-2013-2573unverified exploitdbwww.exploit-db.com/exploits/25812unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/84574 https://packetstormsecurity.com/files/cve/CVE-2013-2573 https://vuldb.com/?id.8912 https://www.coresecurity.com/advisories/tp-link-IP-cameras-multiple-vulnerabilities http://www.securityfocus.com/bid/60195