Tl-sg108e Firmware Security Vulnerabilities and Issues — Tl-sg108e Firmware CVE List

Lucene search

Tp-linkTl-sg108e Firmware

9 matches found

CVE•added 2025/01/27 5:15 p.m.•44 views

CVE-2025-0730

A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usr_account_set.cgi of the component HTTP GET Request Handler. The manipulation of the argument username/password leads to use of get request m...

6.3CVSS7AI score0.0009EPSS

CVE•added 2017/12/20 8:29 p.m.•41 views

CVE-2017-17745

Cross-site scripting (XSS) vulnerability in system_name_set.cgi in TP-Link TL-SG108E 1.0.0 allows authenticated remote attackers to submit arbitrary java script via the 'sysName' parameter.

5.4CVSS5.3AI score0.00157EPSS

CVE•added 2017/12/20 8:29 p.m.•40 views

CVE-2017-17747

Weak access controls in the Device Logout functionality on the TP-Link TL-SG108E v1.0.0 allow remote attackers to call the logout functionality, triggering a denial of service condition.

6.5CVSS6.4AI score0.00164EPSS

CVE•added 2017/04/23 4:59 p.m.•38 views

CVE-2017-8077

On the TP-Link TL-SG108E 1.0, there is a hard-coded ciphering key (a long string beginning with Ei2HNryt). This affects the 1.1.2 Build 20141017 Rel.50749 firmware.

7.5CVSS7.5AI score0.00437EPSS

CVE•added 2017/12/20 8:29 p.m.•37 views

CVE-2017-17746

Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without entering user credentials. The authentication record is stored on the device; thus if an administrator authenticates from a NAT network, the au...

7.7CVSS6.6AI score0.00173EPSS

CVE•added 2017/04/23 4:59 p.m.•33 views

CVE-2017-8076

On the TP-Link TL-SG108E 1.0, admin network communications are RC4 encoded, even though RC4 is deprecated. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.

9.8CVSS9.3AI score0.0042EPSS

CVE•added 2017/04/23 4:59 p.m.•33 views

CVE-2017-8078

On the TP-Link TL-SG108E 1.0, the upgrade process can be requested remotely without authentication (httpupg.cgi with a parameter called cmd). This affects the 1.1.2 Build 20141017 Rel.50749 firmware.

5.3CVSS5.4AI score0.00345EPSS

CVE•added 2017/04/23 4:59 p.m.•32 views

CVE-2017-8075

On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords are in cleartext. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.

9.8CVSS9.2AI score0.01897EPSS

CVE•added 2017/04/23 4:59 p.m.•31 views

CVE-2017-8074

On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log lines where passwords are encoded in hexadecimal. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.

9.8CVSS9.2AI score0.01353EPSS