JVN#78481846: TP-Link SG105PE vulnerable to authentication bypass

TP-Link SG105PE contains an authentication bypass vulnerability (CWE-287).

Impact

Under certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and the product’s settings may be altered with the privilege of the administrator.

Solution

Update the firmware
Update the firmware to the latest version according to the information provided by the developer.
This vulnerability has been addressed in the firmware “TL-SG105PE(UN) 1.0_1.0.0 Build 20221208”.

Products Affected

• TP-Link SG105PE firmware prior to “TL-SG105PE(UN) 1.0_1.0.0 Build 20221208”