TP-LINK Cloud Cameras NCXXX Hardcoded Encryption Key
Posted by deepcore on May 5, 2020 – 7:33 pm
TP-LINK Cloud Cameras including products NC200, NC210, NC220, NC230, NC250, NC260, and NC450 suffer from having a hardcoded encryption key. The issue is located in the methods swSystemBackup and sym.swSystemRestoreFile, where a hardcoded encryption key is used in order to encrypt/decrypt a config backup file. The algorithm in use is DES ECB with modified s-boxes and permutation tables.
Post a reply
You must be logged in to post a comment.