CVE-2017-8075

Опубликовано: 23 апр. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Низкий

Описание

On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords are in cleartext. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.

Ссылки

http://www.securityfocus.com/bid/97983
Third Party Advisory
US Government Resource
https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/
Exploit
Technical Description
Third Party Advisory
http://www.securityfocus.com/bid/97983
Third Party Advisory
US Government Resource
https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/
Exploit
Technical Description
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tp-link:tl-sg108e_firmware:1.1.2:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-sg108e:-:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01897

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-532

Связанные уязвимости

GHSA-vqcx-8f7g-fm7c