Buffer overflow in Tp-link Nc200

CVE-2020-13224

TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices through 1.3.1 build 200401, NC250 devices through 1.3.1 build 200401, NC260 devices throu…

Vulnerability class: Buffer Overflow

EPSS: 0.022 (80.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2020-13224?
CVE-2020-13224 is a high-severity vulnerability in Tp-link Nc200, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 8.8/10. Published 2020-06-17.
How severe is CVE-2020-13224?
High severity. CVSS v3 base score is 8.8 out of 10.