TP-Link c2 Firmware vulnerabilities

4 CVEs affecting TP-Link c2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8220, published 2017-04-25.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-8220, published 2017-04-25. Critical severity, CVSS 9.9. EPSS: 37.2% chance of exploitation in the next 30 days. TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP request by placing shell commands in a "host=" line within HTTP…
• CVE-2017-8218, published 2017-04-25. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a backdoor guest account with the guest password,…
• CVE-2017-8219, published 2017-04-25. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow DoSing the HTTP server via a crafted Cookie header to the /cgi/ansi URI.
• CVE-2017-8217, published 2017-04-25. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n have too permissive iptables rules, e.g., SNMP is not blocked on any interface.