CVE-2020-13224: TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices through 1.3.1 build 200401, NC250 devices throu...

Summary

TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices through 1.3.1 build 200401, NC250 devices through 1.3.1 build 200401, NC260 devices through 1.5.3 build_200401, and NC450 devices through 1.5.4 build ...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
tp-link	nc200_firmware	<= 2.1.10 `cpe:2.3:o:tp-link:nc200_firmware::::::::`
tp-link	nc210_firmware	<= 1.0.10 `cpe:2.3:o:tp-link:nc210_firmware::::::::`
tp-link	nc220_firmware	<= 1.3.1 `cpe:2.3:o:tp-link:nc220_firmware::::::::`
tp-link	nc230_firmware	<= 1.3.1 `cpe:2.3:o:tp-link:nc230_firmware::::::::`
tp-link	nc250_firmware	<= 1.3.1 `cpe:2.3:o:tp-link:nc250_firmware::::::::`
tp-link	nc260_firmware	<= 1.5.3 `cpe:2.3:o:tp-link:nc260_firmware::::::::`
tp-link	nc450_firmware	<= 1.5.4 `cpe:2.3:o:tp-link:nc450_firmware::::::::`

Original advisory text

TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices through 1.3.1 build 200401, NC250 devices throu...

TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices through 1.3.1 build 200401, NC250 devices through 1.3.1 build 200401, NC260 devices through 1.5.3 build_200401, and NC450 devices through 1.5.4 build 200401 have a Buffer Overflow

References

http://packetstormsecurity.com/files/158115/TP-LINK-Cloud-Cameras-NCXXX-Stack-Ov... Exploit Third Party Advisory VDB Entry
https://www.tp-link.com/us/security Vendor Advisory