CVE-2023-22303

2023-01-1700:00:00

jpcert

www.cve.org

tp-link sg105pe

firmware

authentication bypass

vulnerability

administrator impersonation

information disclosure

privilege escalation

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.7%

JSON

TP-Link SG105PE firmware prior to ‘TL-SG105PE(UN) 1.0_1.0.0 Build 20221208’ contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the product’s settings may be altered with the privilege of the administrator.

CNA Affected

[
  {
    "vendor": "TP-Link",
    "product": "TP-Link SG105PE",
    "versions": [
      {
        "version": "firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208'",
        "status": "affected"
      }
    ]
  }
]