CVE-2017-8218 vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a backdoor guest account with the guest password,....
CriticalCVSS 9.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a backdoor guest account with the guest password, and a backdoor test account with the test password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tp-link c2 firmware | <= 0.9.1_4.2_v0032.0_build_160706 | No fix listed |
| tp-link c20i firmware | <= 0.9.1_4.2_v0032.0_build_160706 | No fix listed |
References
- pierrekim.github.io exploit technical-description third-party-advisory