CVEvulnerability

CVE-2013-2579

10.0 HIGH Published 2013-10-11 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2013-10-11
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-255

Description

TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 have an empty password for the hardcoded "qmik" account, which allows remote attackers to obtain administrative access via a TELNET session.

Affected configurations

• tp-link tl-sc3130 • tp-link tl-sc3130g • tp-link tl-sc3171 • tp-link tl-sc3171g • tp-link lm firmware (<= 1.6.18p12 sign5)

Weakness · not in database (1)

CWE-255

References

http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras Exploit
http://www.coresecurity.com/advisories/multiple-vulnerabilities-tp-link-tl-sc3171-ip-cameras Exploit

CVE-2013-2579

Description

Affected configurations

Related

Weakness · not in database (1)

References