Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w8m5-v6rc-xwx3

Опубликовано: 17 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the product's settings may be altered with the privilege of the administrator.

TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the product's settings may be altered with the privilege of the administrator.

EPSS

Процентиль: 76%
0.00919
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
nvd
около 3 лет назад

TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the product's settings may be altered with the privilege of the administrator.

CVSS3: 4.2
fstec
около 3 лет назад

Уязвимость микропрограммного обеспечения коммутаторов TP-Link SG105PE, связанная с недостатками процедуры аутентификации, позволяющая нарушителю обойти процесс аутентификации

EPSS

Процентиль: 76%
0.00919
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287