TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery (CSRF). All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the password of the switch to be modified and the configuration file to be tampered with.
CPE | Name | Operator | Version |
---|---|---|---|
tl-sg2005_firmware | eq | 1.0.0 build20180529rel.40524 | |
tl-sg2008_firmware | eq | 1.0.0 build20180529rel.40524 |