CVE-2013-2578

Currently unrated

Key Information:

Vendor
Tp-link
Status
Tl-sc3130
Tl-sc3130g
Tl-sc3171
Tl-sc3171g
Vendor
CVE Published:
11 October 2013

Badges

👾 Exploit Exists🟡 Public PoC

Summary

cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerName parameter and (2) other unspecified parameters.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2013-2578
Created by Rapid7

References

http://www.coresecurity.com/advisories/multiple-vulnerabi...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

.