CVE-2017-8218: vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a…

PriorityP262critical9.8CVSS 3.0

AVNACLPRNUINSUCHIHAH

EPSS

2.00%

78.3th percentile

vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a backdoor guest account with the guest password, and a backdoor test account with the test password.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
tp-link	c20i_firmware	<= 0.9.1_4.2_v0032.0_build_160706	—
tp-link	c2_firmware	<= 0.9.1_4.2_v0032.0_build_160706	—

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.