CVE-2020-13224: TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices through…

PriorityP352high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

2.18%

80.1th percentile

TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices through 1.3.1 build 200401, NC250 devices through 1.3.1 build 200401, NC260 devices through 1.5.3 build_200401, and NC450 devices through 1.5.4 build 200401 have a Buffer Overflow

Affected

7 ranges

Vendor	Product	Version range	Fixed in
tp-link	nc200_firmware	<= 2.1.10	—
tp-link	nc210_firmware	<= 1.0.10	—
tp-link	nc220_firmware	<= 1.3.1	—
tp-link	nc230_firmware	<= 1.3.1	—
tp-link	nc250_firmware	<= 1.3.1	—
tp-link	nc260_firmware	<= 1.5.3	—
tp-link	nc450_firmware	<= 1.5.4	—

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.