CVE-2018-11482 — CVE-2018-11482

CVE-2018-11482

CRITICAL · CVSS 9.8

EPSS exploitation probability: 0%

Published 2018-05-30T21:29:00.643 · Last modified 2026-06-17T01:36:01.667

Summary

/usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0oxKXL0 password.

Affected products

tp-link — ipc_tl-ipc223\(p\)-6_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when tp-link ships something exploited.

Check my exposure →

References

NVD entry
CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.