CVE:CVE-2020-10231
CNNVD:CNNVD-202004-013
TP-LINK NC200等都是中国普联（TP-LINK）公司的产品。TP-LINK NC200是一款网络摄像机。TP-LINK NC210是一款网络摄像机。TP-LINK NC260是一款网络摄像机。
多款TP-LINK产品中存在代码问题漏洞，该漏洞源于程序没有对httpGetEnv的返回值进行Null值检查。攻击者可利用该漏洞导致ipcamera进程崩溃。以下产品及版本受到影响：TP-Link NC200 2.1.8_Build_171109及之前版本；NC210 1.0.9_Build_171214及之前版本；NC220 1.3.0_Build_180105及之前版本；NC230 1.3.0_Build_171205及之前版本；NC250 1.3.0_Build_171205及之前版本；NC260 1.5.1_Build_190805及之前版本；NC450 1.5.0_Build_181022及之前版本。
solution:Upgrade tp-link nc450_firmware to a higher version than 1.1.1:160928,1.1.2:161013,1.1.6:161124,1.5.0:181022,and avoid the version 1.1.1:160928,1.1.2:161013,1.1.6:161124,1.5.0:181022; Upgrade tp-link nc260_firmware to a higher version than 1.0.5:160804,1.0.6:161114,1.5.1:190805,and avoid the version 1.0.5:160804,1.0.6:161114,1.5.1:190805; Upgrade tp-link nc250_firmware to a higher version than 1.3.0:171205,and avoid the version 1.3.0:171205; Upgrade tp-link nc230_firmware to a higher version than 1.3.0:171205,and avoid the version 1.3.0:171205; Upgrade tp-link nc220_firmware to a higher version than 1.1.12:160321_a,1.1.12:160321_b,1.1.14:161219,1.2.0:170516,1.3.0:180105,and avoid the version 1.1.12:160321_a,1.1.12:160321_b,1.1.14:161219,1.2.0:170516,1.3.0:180105; Upgrade tp-link nc210_firmware to a higher version than 1.0.9:171214,and avoid the version 1.0.9:171214; Upgrade tp-link nc200_firmware to a higher version than 2.1.6:160108_a,2.1.6:160108_b,2.1.7:160315_a,2.1.7:160315_b,2.1.8:171109,and avoid the version 2.1.6:160108_a,2.1.6:160108_b,2.1.7:160315_a,2.1.7:160315_b,2.1.8:171109