CVE-2017-8220 TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP request by placing shell commands in a "host=" line within HTTP PO...
CriticalCVSS 9.9
EPSS 37.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP request by placing shell commands in a "host=" line within HTTP POST data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tp-link c2 firmware | <= 0.9.1_4.2_v0032.0_build_160706 | No fix listed |
| tp-link c20i firmware | <= 0.9.1_4.2_v0032.0_build_160706 | No fix listed |
References
- pierrekim.github.io exploit technical-description third-party-advisory