CVE-2020-13224 Memory corruption in n/a
A buffer overflow in TP-LINK NC series IP cameras allows attackers to execute arbitrary code or cause a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-13224?
CVE-2020-13224 is a high-severity memory corruption vulnerability in n/a, published on 17 Jun 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices through 1.3.1 build 200401, NC250 devices through 1.3.1 build 200401, NC260 devices through 1.5.3 build_200401, and NC450 devices through 1.5.4 build 200401 have a Buffer Overflow
Weakness: CWE-120
Which versions are affected by CVE-2020-13224?
It affects 7 products.
Products include Tp-Link Nc200 Firmware, Tp-Link Nc210 Firmware, Tp-Link Nc220 Firmware, Tp-Link Nc230 Firmware, Tp-Link Nc250 Firmware, Tp-Link Nc260 Firmware and 1 more.
How do I fix CVE-2020-13224?
No fix has been published for CVE-2020-13224 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-13224 being exploited?
There is no known exploitation of CVE-2020-13224 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-j2r8-mxg5-mj4j.