// For flags

CVE-2017-8219

 

Severity Score

6.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow DoSing the HTTP server via a crafted Cookie header to the /cgi/ansi URI.

Los dispositivos TP-Link C2 y C20i a través del firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n permiten hacer DoSing vía servidor HTTP a través de una Cookie de cabecera para /cgi /ansi URI.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2017-04-25 CVE Reserved
  • 2017-04-25 CVE Published
  • 2024-09-16 CVE Updated
  • 2024-09-16 First Exploit
  • 2024-09-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-20: Improper Input Validation
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Tp-link
Search vendor "Tp-link"
 C2 Firmware
Search vendor "Tp-link" for product "C2 Firmware"
 <= 0.9.1_4.2_v0032.0_build_160706
Search vendor "Tp-link" for product "C2 Firmware" and version " <= 0.9.1_4.2_v0032.0_build_160706"
rel.37961n
Affected
in Tp-link
Search vendor "Tp-link"
 C2
Search vendor "Tp-link" for product "C2"
--
Safe
Tp-link
Search vendor "Tp-link"
 C20i Firmware
Search vendor "Tp-link" for product "C20i Firmware"
 <= 0.9.1_4.2_v0032.0_build_160706
Search vendor "Tp-link" for product "C20i Firmware" and version " <= 0.9.1_4.2_v0032.0_build_160706"
rel.37961n
Affected
in Tp-link
Search vendor "Tp-link"
 C20i
Search vendor "Tp-link" for product "C20i"
--
Safe