A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cameras TL-SC 3130 TL-SC 3130G 3171G. and 4171G 1.6.18P12s which could let a malicious user execute arbitrary code.