Lucene search
PRIOn knowledge basePRION:CVE-2023-28368HistoryApr 11, 2023 - 9:15 a.m.
Design/Logic Flaw
2023-04-1109:15:00
PRIOn knowledge base
www.prio-n.com
3
tp-link
l2 switch
ssh
host keys
firmware
vulnerability
administrator
fake device
credential information
TP-Link L2 switch T2600G-28SQ firmware versions prior to ‘T2600G-28SQ(UN)_V1_1.0.6 Build 20230227’ uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential information for the affected device may be obtained.
| CPE | Name | Operator | Version |
|---|---|---|---|
| t2600g-28sq_firmware | eq | 20190530 | |
| t2600g-28sq_firmware | eq | 20200304 |
Related
jvn
jvn
JVN#62420378: TP-Link T2600G-28SQ uses vulnerable SSH host keys
2023-03-17 00:00:00
nvd
nvd
CVE-2023-28368
2023-04-11 09:15:08
cve
cve
CVE-2023-28368
2023-04-11 09:15:08
cvelist
cvelist
CVE-2023-28368
2023-04-11 00:00:00