CVSS 3.0
9.8 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2018-11482
Critical (9.8) in tp-link. EPSS 1.2% chance of exploitation in the next 30 days.
/usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0oxKXL0 password.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
- CWE
- CWE-798
- Published
- Modified
- Record from
- the NVD, synced
Affected
- tp-link:ipc_tl-ipc223\(p\)-6_firmware
- tp-link:tl-ipc323k-d_firmware
- tp-link:tl-ipc325\(kp\)_firmware
- tp-link:tl-ipc40a-4_firmware