CVE-2020-11445

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-04-01 · updated 2026-06-17

Description

TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involving a Wi-Fi session with GPS enabled, aka CNVD-2020-04855.

Affected products

TP-Link Kc200 Firmware: through 2020-02-09
TP-Link Kc300S2 Firmware: through 2020-02-09
TP-Link Kc310S2 Firmware: through 2020-02-09
TP-Link Nc200 Firmware: through 2020-02-09
TP-Link Nc210 Firmware: through 2020-02-09
TP-Link Nc220 Firmware: through 2020-02-09
TP-Link Nc230 Firmware: through 2020-02-09
TP-Link Nc250 Firmware: through 2020-02-09
TP-Link Nc260 Firmware: through 2020-02-09
TP-Link Nc450 Firmware: through 2020-02-09
TP-Link Tapo C100 Firmware: through 2020-02-09
TP-Link Systems Inc. Tapo C200 v5: through 2020-02-09
TP-Link Tl-Sc3430 Firmware: through 2020-02-09
TP-Link Tl-Sc3430N Firmware: through 2020-02-09
TP-Link Tl-Sc4171G Firmware: through 2020-02-09

References

Get alerted when CVE-2020-11445 or the next vulnerability affects your stack