TP-Link Tl-Sc 4171g Firmware vulnerabilities

2 CVEs affecting TP-Link Tl-Sc 4171g Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-2573, published 2020-01-29.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-2573, published 2020-01-29. Critical severity, CVSS 9.8. EPSS: 42.2% chance of exploitation in the next 30 days. A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a…
• CVE-2013-2572, published 2020-01-29. High severity, CVSS 7.5. EPSS: 16.4% chance of exploitation in the next 30 days. A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-coded credentials for the administrative Web interface,…