Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:c20i_firmware:*:rel.37961n:*:*:*:*:*:*

part: o version: * update: rel.37961n

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductC20I Firmware (298710fb-fef6-54ce-991f-e9a330a4a4b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-8220 vulnerable 2026-06-08 05:10:07.675669 Details available
TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP request by placing shell commands in a "host=" line within HTTP POST data.
Published: 2017-04-25T20:00:00.000Z
Updated: 2024-09-17T00:56:29.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8219 vulnerable 2026-06-08 05:10:07.675163 Details available
TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow DoSing the HTTP server via a crafted Cookie header to the /cgi/ansi URI.
Published: 2017-04-25T20:00:00.000Z
Updated: 2024-09-16T21:58:08.841Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8218 vulnerable 2026-06-08 05:10:07.674754 Details available
vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a backdoor guest account with the guest password, and a backdoor test account with the test password.
Published: 2017-04-25T20:00:00.000Z
Updated: 2024-09-16T18:34:45.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8217 vulnerable 2026-06-08 05:10:07.673537 Details available
TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n have too permissive iptables rules, e.g., SNMP is not blocked on any interface.
Published: 2017-04-25T20:00:00.000Z
Updated: 2024-09-17T01:11:20.092Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.