VulnerabilityModified
CVE-2023-49515
Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allows a physically proximate attacker to obtain sensitive information via a connection to the UART pin components.
MEDIUM 4.6EPSS 0.36%
Does this matter?
Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own.
Description
Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allows a physically proximate attacker to obtain sensitive information via a connection to the UART pin components.
- CVSS 3.1
- 4.6 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.36% probability · 29th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-922
- Affected
- tp-link/tapo c200 firmware · tp-link/tapo tc70 firmware
- Source
- cve@mitre.org
References
- https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UARTExploit, Third Party Advisory
- https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART/tree/masterExploit, Third Party Advisory
- https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UARTExploit, Third Party Advisory
- https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART/tree/masterExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.