TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 have an empty password for the hardcoded "qmik" account, which allows remote attackers to obtain administrative access via a TELNET session.
References
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2013-10-11 14:55
Updated : 2013-10-15 07:11
NVD link : CVE-2013-2579
Mitre link : CVE-2013-2579
JSON object : View
CWE
CWE-255
Credentials Management Errors
Products Affected
tp-link
- tl-sc3171
- lm_firmware
- tl-sc3130
- tl-sc3171g
- tl-sc3130g