CVE-2020-12109
8.8 highEPSS 74%
High (8.8) in tp-link. EPSS 74% chance of exploitation in the next 30 days.
Certain TP-Link devices allow Command Injection. This affects NC200 2.1.9 build 200225, NC210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304.
Severity
CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 74% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-11-01)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- tp-link:nc200_firmware
- tp-link:nc210_firmware
- tp-link:nc220_firmware
- tp-link:nc230_firmware
- tp-link:nc250_firmware
- tp-link:nc260_firmware
- tp-link:nc450_firmware
References
Check your stackJSON