Critical severity · published May 4, 2020
CVE-2020-12110
Certain TP-Link devices have a Hardcoded Encryption Key
9.8
CVSS
13.6%
EPSS
No
On KEV
Description
Certain TP-Link devices have a Hardcoded Encryption Key. This affects NC200 2.1.9 build 200225, N210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)13.6% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NF
Nc200 Firmware · Tp-link
2.1.6; 2.1.9 · source: NVD
NF
Nc210 Firmware · Tp-link
1.0.3; 1.0.4; 1.0.9 · source: NVD
NF
Nc220 Firmware · Tp-link
1.2.0; 1.3.0; 1.3.0 · source: NVD
NF
Nc230 Firmware · Tp-link
1.0.3; 1.2.1; 1.3.0 · source: NVD
NF
Nc250 Firmware · Tp-link
1.0.8; 1.0.10; 1.2.1; 1.3.0 · source: NVD
NF
Nc260 Firmware · Tp-link
1.0.5; 1.0.6; 1.4.1; 1.5.0; 1.5.2 · source: NVD
NF
Nc450 Firmware · Tp-link
1.0.15; 1.1.2; 1.3.4; 1.5.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-12110
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-12110
Exploit
http://packetstormsecurity.com/files/157532/TP-LINK-Cloud-Cameras-NCXXX-Hardcoded-Encryption-Key.html
Exploit
https://seclists.org/fulldisclosure/2020/May/3
More from Nc200 Firmware
8.8
CVE-2020-13224
TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices through 1.3.1 build 200401,…
8.8
CVE-2020-12109
Certain TP-Link devices allow Command Injection
7.5
CVE-2020-10231
TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1.3.0_Build_171205,…
5.3
CVE-2020-11445
TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involving a Wi-Fi session with GPS enabled,…