CVE-2020-12109

Certain TP-Link devices allow Command Injection

published May 4, 2020

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
74%
Percentile
99.5
In the wild
Unconfirmed
What it is

Certain TP-Link devices allow Command Injection. This affects NC200 2.1.9 build 200225, NC210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.74338 · 99.5th percentile
Published
2020-05-04T15:06Z
EPSS history
Timeline
  • 04 MAY 15:06Z
    Certain TP-Link devices allow Command Injection
    cvelistv5