Japan Vulnerability NotesJVN:62420378JVN#62420378: TP-Link T2600G-28SQ uses vulnerable SSH host keys
5.7 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
25.9%
TP-Link layer-2 switch T2600G-28SQ uses vulnerable SSH host keys (CWE-1391).
Impact
The credential information for an affected device may be obtained when the administrator is tricked to login to a device which spoofs the affected device.
Solution
Update the Firmware
Update the firmware to the latest version according to the information provided by the developer.
Products Affected
- T2600G-28SQ firmware versions prior to “T2600G-28SQ(UN)_V1_1.0.6 Build 20230227”
Related
5.7 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
25.9%