CVE-2020-10231: TP-Link NC200 Firmware

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1.3.0_Build_171205, NC260 through 1.5.1_Build_190805, and NC450 through 1.5.0_Build_181022 devices allow a remote NULL Pointer Dereference.

Affected products

• TP-Link NC200 Firmware: version 2.1.6 only; version 2.1.7 only; version 2.1.8 only
• TP-Link NC210 Firmware: version 1.0.9 only
• TP-Link NC220 Firmware: version 1.1.12 only; version 1.1.14 only; version 1.2.0 only; version 1.3.0 only
• TP-Link NC230 Firmware: version 1.3.0 only
• TP-Link NC250 Firmware: version 1.3.0 only
• TP-Link NC260 Firmware: version 1.0.5 only; version 1.0.6 only; version 1.5.1 only
• TP-Link NC450 Firmware: version 1.1.1 only; version 1.1.2 only; version 1.1.6 only; version 1.5.0 only

Published 2020-04-01. Last modified 2026-06-17.