CVE-2017-8218

vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a backdoor guest account with the guest password, and a backdoor test account with the test password.

• CWE-1188

• https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.htmlExploit, Technical Description, Third Party Advisory
• https://pierrekim.github.io/blog/2017-02-09-tplink-c2-and-c20i-vulnerable.htmlExploit, Technical Description, Third Party Advisory

Published

Apr 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8212The driver of honor 5C,honor 6x Huawei smart phones with sof…
• CVE-2017-8213Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC10…
• CVE-2017-8214Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 …
• CVE-2017-8215Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 …
• CVE-2017-8216Warsaw Huawei Smart phones with software of versions earlier…
• CVE-2017-8217TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032…
• CVE-2017-8219TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032…
• CVE-2017-8220TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032…
• CVE-2017-8221Wireless IP Camera (P2P) WIFICAM devices rely on a cleartext…
• CVE-2017-8222Wireless IP Camera (P2P) WIFICAM devices have an "Apple Prod…
• CVE-2017-8223On Wireless IP Camera (P2P) WIFICAM devices, an attacker can…
• CVE-2017-8224Wireless IP Camera (P2P) WIFICAM devices have a backdoor roo…