CVE-2025-0730

🗓️ 27 Jan 2025 17:00:13Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 64 Views🌐 WEB

Vulnerability CVE-2025-0730 affects TP-Link TL-SG108E allowing remote attacks via HTTP GET Request.

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability in the `usr_account_set.cgi` script of the TP-Link TL-SG108E wireless router’s microprogramming software allows a hacker to disclose protected information.	3 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-0730	27 Jan 202517:01	–	circl
CNNVD	TP-LINK TL-SG108E 安全漏洞	27 Jan 202500:00	–	cnnvd
Cvelist	CVE-2025-0730 TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings	27 Jan 202517:00	–	cvelist
EUVD	EUVD-2025-1839	3 Oct 202520:07	–	euvd
NVD	CVE-2025-0730	27 Jan 202517:15	–	nvd
Positive Technologies	PT-2025-1309 · Tp Link · Tp-Link Tl-Sg108E	27 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-0730	23 May 202511:57	–	redhatcve
Vulnrichment	CVE-2025-0730 TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings	27 Jan 202517:00	–	vulnrichment

NVD

Node

tp-link tl-sg108e_firmwareMatch1.0.0build_20201208_rel_40304

AND

tp-link tl-sg108eMatch-

[
  {
    "vendor": "TP-Link",
    "product": "TL-SG108E",
    "versions": [
      {
        "version": "1.0.0 Build 20201208 Rel. 40304",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP GET Request Handler"
    ]
  }
]

Source	Link
github	www.github.com/TheCyberDiver/Public-Disclosures-CVE-/blob/main/tp-link%20sensitive%20info%20in%20GET.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
static	www.static.tp-link.com/upload/beta/2025/202501/20250124/TL-SG108E(UN)%206.0_1.0.0%20Build%2020250124%20Rel.54920(Beta)_up.zip
tp-link	www.tp-link.com/

Parameter	Position	Path	Description	CWE
username	query param	/usr_account_set.cgi	Manipulation of username/password leads to use of GET with sensitive query strings.	CWE-598
password	query param	/usr_account_set.cgi	Manipulation of username/password leads to use of GET with sensitive query strings.	CWE-598

17 Jun 2026 08:27Current

7High risk

Vulners AI Score7

CVSS 22.6

CVSS 3.13.7

CVSS 46.3

CVSS 33.7

EPSS0.00663

SSVC

CWE-598