TP-Link TL-IPC40A-4
Approved changes feed: RSS · Atom
cpe:2.3:h:tp-link:tl-ipc40a-4:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Tp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e) |
|---|---|
| Product | Tl Ipc40A 4 (14440256-7f80-5c9d-b864-9d8a711eeba2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-11482 |
not_vulnerable | 2026-06-08 05:10:38.563769 |
Details available
/usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0oxKXL0 password.
Published: 2018-05-30T21:00:00.000Z
Updated: 2024-08-05T08:10:14.572Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11481 |
not_vulnerable | 2026-06-08 05:10:38.563164 |
Details available
TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua does not block various punctuation characters.
Published: 2018-05-30T21:00:00.000Z
Updated: 2024-08-05T08:10:14.807Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.