Vulnerability Details : CVE-2013-2578
Public exploit exists!
cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the ServerName parameter and (2) other unspecified parameters.
Products affected by CVE-2013-2578
- cpe:2.3:h:tp-link:tl-sc3130:-:*:*:*:*:*:*:*
- cpe:2.3:h:tp-link:tl-sc3130g:-:*:*:*:*:*:*:*
- cpe:2.3:h:tp-link:tl-sc3171:-:*:*:*:*:*:*:*
- cpe:2.3:h:tp-link:tl-sc3171g:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:lm_firmware:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-2578
69.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2013-2578
-
TP-Link SC2020n Authenticated Telnet Injection
Disclosure Date: 2015-12-20First seen: 2020-04-26exploit/linux/http/tp_link_sc2020n_authenticated_telnet_injectionThe TP-Link SC2020n Network Video Camera is vulnerable to OS Command Injection via the web interface. By firing up the telnet daemon, it is possible to gain root on the device. The vulnerability exists at /cgi-bin/admin/servetest, which is accessible
CVSS scores for CVE-2013-2578
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
CWE ids for CVE-2013-2578
-
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-2578
-
http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras
Multiple Vulnerabilities in TP-Link TL-SC3171 IP Cameras | Core SecurityExploit
Jump to