4788 matches found
Design/Logic Flaw
On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords are in cleartext. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...
CVE-2017-8074
On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log lines where passwords are encoded in hexadecimal. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...
Design/Logic Flaw
On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log lines where passwords are encoded in hexadecimal. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...
CVE-2017-8076
The CVE-2017-8076 entry concerns the TP-Link TL-SG108E v1.0 switch where admin network communications are encoded with RC4, despite RC4 deprecation. Connected sources confirm the affected firmware: 1.1.2 Build 20141017 Rel.50749. The root cause is use of the RC4 cipher for admin traffic, enabling...
CVE-2017-8078
On the TP-Link TL-SG108E 1.0, the upgrade process can be requested remotely without authentication httpupg.cgi with a parameter called cmd. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...
CVE-2017-8074
On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log lines where passwords are encoded in hexadecimal. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...
CVE-2017-8075
The CVE-2017-8075 entry affects the TP-Link TL-SG108E v1.0 devices, where a vulnerability allows an attacker to read credentials from the device’s "Switch Info" log lines, exposing passwords in cleartext. This is tied to firmware 1.1.2 Build 20141017 Rel.50749. Several connected records corrobora...
CVE-2017-8077
On the TP-Link TL-SG108E 1.0, there is a hard-coded ciphering key a long string beginning with Ei2HNryt. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...
CVE-2017-8076
On the TP-Link TL-SG108E 1.0, admin network communications are RC4 encoded, even though RC4 is deprecated. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...
CVE-2017-8077
The CVE-2017-8077 issue affects the TP-Link TL-SG108E (firmware 1.1.2 Build 20141017 Rel.50749, 1.0). A hard-coded ciphering key (starts with Ei2HNryt) in the firmware is cited as the root cause. Red Hat and CNVD entries corroborate a vulnerability due to hard-coded encryption keys, with document...
CVE-2017-8078
The TP-Link TL-SG108E (firmware 1.1.2 Build 20141017 Rel.50749) has a remote unauthenticated upgrade process vulnerability: httpupg.cgi with parameter cmd can be requested without authentication. This affects TL-SG108E 1.0. Description does not provide exploitation status or remediation. Monitori...
CVE-2017-8075
On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords are in cleartext. This affects the 1.1.2 Build 20141017 Rel.50749 firmware...
CVE-2017-8074
TP-Link TL-SG108E (1.0) is affected by CVE-2017-8074. A remote attacker could retrieve credentials from the SEND data log lines where passwords are encoded in hexadecimal, impacting firmware version 1.1.2 Build 20141017 Rel.50749. Documented impact includes unauthorized disclosure of credentials ...
RogueSploit - Powerfull social engeering Wi-Fi trap!
RogueSploit is an open source automated script made to create a Fake Acces Point, with dhcpd server, dns spoofing, host redirection, browserautopwn1 or autopwn2 or beef+mitmf. TO DO LIST: Add BeEF;DONE Add MITMF;DONE Add BDFProxy; Add SeToolkit; Add Hostapd as fake ap; Add some features; What you...
Multiple vulnerabilities in several TP-Link routers
The TP-LINK Archer C20i/C2 is a router from China P&L. A denial of service, security bypass, and command injection vulnerability exists in multiple TP-Link routers. An attacker could use this vulnerability to bypass some security restrictions to perform unauthorized operations, cause a denial of...
TP-Link C2 and C20i Denial of Service Vulnerability
TP-Link is a Chinese manufacturer of network equipment such as routers and IOT devices. A denial of service vulnerability exists in TP-Link C2 and C20i. An attacker can exploit the vulnerability to cause a denial of service by sending an HTTP request to the affected device, crashing the HTTP serv...
TP-Link C2 and C20i Default Credential Design Vulnerability
TP-Link is a Chinese manufacturer of network equipment such as routers, IOT devices, and more. A default credential design vulnerability exists in the vsftpd FTP server of the TP-Link C2 and C20i. An attacker can exploit the vulnerability to execute the system command multiple times and run with...
Updated Firmware Due for Serious TP-Link Router Vulnerabilities
Chinese router maker TP-Link is wrestling with the disclosure of a handful of vulnerabilities in its C2 and C20i routers. The most severe of the flaws lead to remote code execution on a device; the attack, however, would require an attacker first obtain valid credentials. Researcher Pierre Kim...
TP-Link C2 and C20i command injection Vulnerability
Product Description TP-Link is a Chinese manufacturer of computer networking products such as routers and IOT devices. Vulnerabilities Summary Command Injections exist in the HTTP management interface up to the latest firmware version 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n of TP-Link C2 and...
TP-Link C2 / C20i Command Injection / Denial Of Service
TP-Link CS and C20i are vulnerable to command injection, denial of service, and improper firewall rule issues. Title: TP-Link C2 and C20i vulnerable to command injection authenticated root RCE, DoS, improper firewall rules Advisory URL: https://pierrekim.github.io/advisories/2017-tplink-0x00.txt...