Details of VAR-201610-0501

ID

VAR-201610-0501

CVE

CVE-2016-1000009

TITLE

TP-LINK Technologies of tp-link Vulnerabilities in security features

Trust: 0.8

sources: JVNDB: JVNDB-2016-009741

DESCRIPTION

TP-LINK lost control of two domains, www.tplinklogin.net and tplinkextender.net. Please note that these domains are physically printed on many of the devices. TP-LINK Technologies of tp-link contains a vulnerability in the security functions.Information may be tampered with. TP-LINK (Pulian) is a network communication equipment company in China. There is a security vulnerability in TP-LINK that stems from the loss of control over the domain names (www.tplinklogin.net and tplinkextender.net). Please pay attention to the authenticity of this domain name

Trust: 1.71

sources: NVD: CVE-2016-1000009 // JVNDB: JVNDB-2016-009741 // VULHUB: VHN-88521

AFFECTED PRODUCTS

vendor:	tp link	model:	tp-link	scope:	eq	version:	-	Trust: 2.4
vendor:	tp link	model:	tp-link	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2016-009741 // CNNVD: CNNVD-201610-149 // NVD: CVE-2016-1000009

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-1000009
value:	HIGH
Trust: 1.0
NVD:	CVE-2016-1000009
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201610-149
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-88521
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2016-1000009
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-88521
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-1000009
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-88521 // JVNDB: JVNDB-2016-009741 // CNNVD: CNNVD-201610-149 // NVD: CVE-2016-1000009

PROBLEMTYPE DATA

problemtype:	CWE-254	Trust: 1.1
problemtype:	Security features (CWE-254) [NVD evaluation ]	Trust: 0.8

sources: VULHUB: VHN-88521 // JVNDB: JVNDB-2016-009741 // NVD: CVE-2016-1000009

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201610-149

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-201610-149

PATCH

title:

TP-LINK Domain name security vulnerabilities

url:

http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=64555

Trust: 0.6

sources: CNNVD: CNNVD-201610-149

EXTERNAL IDS

db:	NVD	id:	CVE-2016-1000009	Trust: 3.3
db:	JVNDB	id:	JVNDB-2016-009741	Trust: 0.8
db:	CNNVD	id:	CNNVD-201610-149	Trust: 0.7
db:	VULHUB	id:	VHN-88521	Trust: 0.1

sources: VULHUB: VHN-88521 // JVNDB: JVNDB-2016-009741 // CNNVD: CNNVD-201610-149 // NVD: CVE-2016-1000009

REFERENCES

url:	http://seclists.org/bugtraq/2016/jul/3	Trust: 2.5
url:	https://pbs.twimg.com/media/cmnq3f0wiaas_x0.jpg	Trust: 2.5
url:	https://pbs.twimg.com/media/cmnqgi0waaibpha.jpg	Trust: 2.5
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1000009	Trust: 0.8

sources: VULHUB: VHN-88521 // JVNDB: JVNDB-2016-009741 // CNNVD: CNNVD-201610-149 // NVD: CVE-2016-1000009

SOURCES

db:	VULHUB	id:	VHN-88521
db:	JVNDB	id:	JVNDB-2016-009741
db:	CNNVD	id:	CNNVD-201610-149
db:	NVD	id:	CVE-2016-1000009

LAST UPDATE DATE

2025-04-12T23:34:58.210000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-88521	date:	2018-04-13T00:00:00
db:	JVNDB	id:	JVNDB-2016-009741	date:	2024-07-24T06:36:00
db:	CNNVD	id:	CNNVD-201610-149	date:	2016-10-13T00:00:00
db:	NVD	id:	CVE-2016-1000009	date:	2025-04-12T10:46:40.837

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-88521	date:	2016-10-06T00:00:00
db:	JVNDB	id:	JVNDB-2016-009741	date:	2024-07-24T00:00:00
db:	CNNVD	id:	CNNVD-201610-149	date:	2016-10-13T00:00:00
db:	NVD	id:	CVE-2016-1000009	date:	2016-10-06T14:59:16.693