Tp Link Tl Ipc40A 4 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Tp Link Tl Ipc40A 4, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2018-11482tp-linkipc_tl-ipc223\(p\)-6_firmware+3
EPSS score
1.22%
/usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0oxKXL0 password.8.8CVE-2018-11481tp-linkipc_tl-ipc223\(p\)-6_firmware+3
EPSS score
1.76%
TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua does not block various punctuation characters.