8.7
CVSS 4.0
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се от съседна мрежа, без особени условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models allows an attacker on the LAN to reset the admin password without verification by manipulating client-side state. Attackers can gain full administrative access to the device, compromising configuration and network security.
Засегнати продукти
- TP-Link Systems Inc. VIGI InSight Sx45 Series (S245/S345/S445): преди 3.1.0_Build_250820_Rel.57668n
- TP-Link Systems Inc. VIGI Cx45 Series (C345/C445): преди 3.1.0_Build_250820_Rel.57668n
- TP-Link Systems Inc. VIGI InSight Sx55 Series (S355/S455): преди 3.1.0_Build_250820_Rel.58873n
- TP-Link Systems Inc. VIGI Cx55 Series (C355/C455): преди 3.1.0_Build_250820_Rel.58873n
- TP-Link Systems Inc. VIGI InSight Sx85 Series (S285/S385): преди 3.0.2_Build_250630_Rel.71279n
- TP-Link Systems Inc. VIGI Cx85 Series (C385/C485): преди 3.0.2_Build_250630_Rel.71279n
- TP-Link Systems Inc. VIGI InSight S655I: преди 1.1.1_Build_250625_Rel.64224n
- TP-Link Systems Inc. VIGI InSight Sx45ZI Series (S245ZI/S345ZI/S445ZI): преди 1.2.0_Build_250820_Rel.60930n
- TP-Link Systems Inc. VIGI InSight Sx85PI Series (S385PI/S485PI): преди 1.2.0_Build_250827_Rel.66817n
- TP-Link Systems Inc. VIGI C340S: преди 3.1.0_Build_250625_Rel.65381n
- TP-Link Systems Inc. VIGI C540S / EasyCam C540S: преди 3.1.0_Build_250625_Rel.66601n
- TP-Link Systems Inc. VIGI C540V: преди 2.1.0_Build_250702_Rel.54300n
- TP-Link Systems Inc. VIGI C250: преди 2.1.0_Build_250702_Rel.54301n
- TP-Link Systems Inc. VIGI Cx50 Series (C350/C450): преди 2.1.0_Build_250702_Rel.54294n
- TP-Link Systems Inc. VIGI Cx20I 1.0 Series (C220I 1.0/C320I 1.0/C420I 1.0): преди 2.1.0_Build_251014_Rel.58331n
- TP-Link Systems Inc. VIGI Cx20I 1.20 Series (C220I 1.20/C320I 1.20/C420I 1.20): преди 2.1.0_Build_250701_Rel.44071n
- TP-Link Systems Inc. VIGI Cx30I 1.0 Series (C230I 1.0/C330I 1.0/C430I 1.0): преди 2.1.0_Build_250701_Rel.45506n
- TP-Link Systems Inc. VIGI Cx30I 1.20 Series (C230I 1.20/C330I 1.20/C430I 1.20): преди 2.1.0_Build_250701_Rel.44555n
- TP-Link Systems Inc. VIGI Cx40I 1.0 Series (C240I 1.0/C340I 1.0/C440I 1.0): преди 2.1.0_Build_250701_Rel.46003n
- TP-Link Systems Inc. VIGI Cx40I 1.20 Series (C240I 1.20/C340I 1.20/C440I 1.20): преди 2.1.0_Build_250701_Rel.45041n
- TP-Link Systems Inc. VIGI Cx30 1.0 Series (C230 1.0/C330 1.0/C430 1.0): преди 2.1.0_Build_250701_Rel.46796n
- TP-Link Systems Inc. VIGI Cx30 1.20 Series (C230 1.20/C330 1.20/C430 1.20): преди 2.1.0_Build_250701_Rel.46796n
- TP-Link Systems Inc. VIGI C230I Mini: преди 2.1.0_Build_250701_Rel.47570n
- TP-Link Systems Inc. VIGI C240 1.0: преди 2.1.0_Build_250701_Rel.48425n
- TP-Link Systems Inc. VIGI C340 2.0: преди 2.1.0_Build_250701_Rel.49304n
- TP-Link Systems Inc. VIGI C440 2.0: преди 2.1.0_Build_250701_Rel.49778n
- TP-Link Systems Inc. VIGI C540 2.0: преди 2.1.0_Build_250701_Rel.50397n
- TP-Link Systems Inc. VIGI C540-4G: преди 2.2.0_Build_250826_Rel.56808n
- TP-Link Systems Inc. VIGI C340-W 2.x Series (C340-W 2.0/C340-W 2.20): преди 2.1.1_Build_250717_Rel.66528n
- TP-Link Systems Inc. VIGI C440-W 2.0: преди 2.1.1_Build_250717_Rel.66632n
- TP-Link Systems Inc. VIGI C540-W 2.0: преди 2.1.1_Build_250717_Rel.67730n
- TP-Link Systems Inc. VIGI InSight S345-4G: преди 2.1.0_Build_250725_Rel.36867n
- TP-Link Systems Inc. VIGI InSight Sx25 Series (S225/S325/S425): преди 1.1.0_Build_250630_Rel.39597n
- TP-Link Systems Inc. VIGI Cx20 Series (C320/C420): преди 2.1.0_Build_250701_Rel.39597n
Вид слабост
История
- 16 януари 2026 Публикувано