VULNERABILITY INTELLIGENCE
CVE-2013-2579
CVSS score10 HIGH
EPSS probability3.74%
CISA KEVNot currently listed
Published2013-10-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 have an empty password for the hardcoded "qmik" account, which allows remote attackers to obtain administrative access via a TELNET session.
Primary references
- cve@mitre.org — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Exploit