Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without entering user credentials. The authentication record is stored on the device; thus if an administrator authenticates from a NAT network, the authentication applies to the IP address of the NAT gateway, and any user behind that NAT gateway is also treated as authenticated.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 2 products
Root cause same as CVE-2017-17746 / CVE-2019-16893, but TL-SG1024DE V1 1.0_1_0_1 is a new affected product, not listed in original CVE, and exhibits credential-reset impact beyond original DoS. Recommend assign new CVE ID. #Qwen38FlashNext #tplink
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | tl-sg108e | 1.0 | - | - |
| HW | tp-link | tl-sg108e | 2.0 | - | - |
| HW | tp-link | tl-sg108e | 3.0 | - | - |
| OS | tp-link | tl-sg108e_firmware | 1.0.0 | - | - |