CVE-2013-2572: tp-link tl-sc_3130_firmware Use of Hard-coded Credentials
Vulnerability summary
CVE-2013-2572 is a high (CVSS 7.5) Use of Hard-coded Credentials vulnerability in tp-link tl-sc_3130_firmware. EPSS estimates a 16.43% chance of exploitation in the next 30 days, higher than 96.9% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 29-01-2020PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-coded credentials for the administrative Web interface, which could let a malicious user obtain unauthorized access to CGI files.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
16.43%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 16.43% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (coresecurity.com)
Maturity: unknown
TP-Link IP Cameras Firmware 1.6.18P12 - Multiple Vulnerabilities
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Tp-link4 products
- tl-sc_3130_firmware≤ 1.6.18p12
- tl-sc_3130g_firmware≤ 1.6.18p12
- tl-sc_3171g_firmware≤ 1.6.18p12
- tl-sc_4171g_firmware≤ 1.6.18p12
1 vendor · 4 products
References
5 links- www.coresecurity.com/advisories/tp-link-ip-cameras-multiple-vulnerabilitiesX Refsource MISCExploitPatchThird Party Advisory