CVE-2013-2579

TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 have an empty password for the hardcoded "qmik" account, which allows remote attackers to obtain administrative access via a TELNET session.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:h:tp-link:tl-sc3130:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-sc3130g:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-sc3171:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-sc3171g:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:lm_firmware:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2013-10-11 21:55

Updated : 2023-12-10 11:16


NVD link : CVE-2013-2579

Mitre link : CVE-2013-2579

CVE.ORG link : CVE-2013-2579


JSON object : View

Products Affected

tp-link

  • tl-sc3130g
  • tl-sc3171
  • tl-sc3130
  • tl-sc3171g
  • lm_firmware
CWE
CWE-255

Credentials Management Errors