High severity8.8NVD Advisory· Published May 4, 2020· Updated Jun 17, 2026
CVE-2020-12111
CVE-2020-12111
Description
Certain TP-Link devices allow Command Injection. This affects NC260 1.5.2 build 200304 and NC450 1.5.3 build 200304.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:o:tp-link:nc260_firmware:1.0.5:160804:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:tp-link:nc260_firmware:1.0.5:160804:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc260_firmware:1.0.6:161114:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc260_firmware:1.4.1:180720:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc260_firmware:1.5.0:181123:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc260_firmware:1.5.2:200304:*:*:*:*:*:*
cpe:2.3:o:tp-link:nc450_firmware:1.0.15:160920:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:tp-link:nc450_firmware:1.0.15:160920:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc450_firmware:1.1.2:161013:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc450_firmware:1.3.4:171130:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc450_firmware:1.5.3:200304:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/157533/TP-LINK-Cloud-Cameras-NCXXX-SetEncryptKey-Command-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2020/May/4nvdExploitMailing ListThird Party Advisory
- www.tp-link.com/us/securitynvdVendor Advisory
News mentions
0No linked articles in our index yet.