Medium severity · published Jul 2, 2017
CVE-2017-10796
On TP-Link NC250 devices with firmware through 1.2.1 build 170515, anyone can view video and audio without authentication via an rtsp://admin@yourip:554/h264_hd.sdp URL
6.5
CVSS
0.9%
EPSS
No
On KEV
Description
On TP-Link NC250 devices with firmware through 1.2.1 build 170515, anyone can view video and audio without authentication via an rtsp://admin@yourip:554/h264_hd.sdp URL.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NF
Nc250 Firmware · Tp-link
through 1.2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-10796
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-10796
Third Party Advisory
https://gist.github.com/elbauldelgeek/8f0f24c582f43f51a34b34420a385d75
More from Nc250 Firmware
9.8
CVE-2020-12110
Certain TP-Link devices have a Hardcoded Encryption Key
8.8
CVE-2020-13224
TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices through 1.3.1 build 200401,…
8.8
CVE-2020-12109
Certain TP-Link devices allow Command Injection
7.5
CVE-2020-10231
TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1.3.0_Build_171205,…
5.3
CVE-2020-11445
TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involving a Wi-Fi session with GPS enabled,…