Vulnerabilities > CVE-2020-10231 - NULL Pointer Dereference vulnerability in Tp-Link products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

tp-link

CWE-476

NVD

Published: 2020-04-01

Updated: 2024-11-21

Summary

TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1.3.0_Build_171205, NC260 through 1.5.1_Build_190805, and NC450 through 1.5.0_Build_181022 devices allow a remote NULL Pointer Dereference.

Vulnerable Configurations

Part	Description	Count
OS	Tp-Link TP Link Nc450 Firmware 1.1.1 TP Link Nc450 Firmware 1.1.2 TP Link Nc450 Firmware 1.1.6 TP Link Nc450 Firmware 1.5.0 TP Link Nc260 Firmware 1.0.5 TP Link Nc260 Firmware 1.0.6 TP Link Nc260 Firmware 1.5.1 TP Link Nc250 Firmware 1.3.0 TP Link Nc230 Firmware 1.3.0 TP Link Nc220 Firmware 1.1.12 TP Link Nc220 Firmware 1.1.14 TP Link Nc220 Firmware 1.2.0 TP Link Nc220 Firmware 1.3.0 TP Link Nc210 Firmware 1.0.9 TP Link Nc200 Firmware 2.1.6 TP Link Nc200 Firmware 2.1.7 TP Link Nc200 Firmware 2.1.8	20
Hardware	Tp-Link TP Link Nc450 - TP Link Nc260 - TP Link Nc250 - TP Link Nc230 - TP Link Nc220 - TP Link Nc210 - TP Link Nc200 -	7

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References