Tl-sg108e Firmware (Tp-link) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2025-01-27. Vendor: Tp-link.
CVEs of Tl-sg108e Firmware
- CVE-2025-0730 - CVSS 6.3 (medium), 2025-01-27: A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file…
- CVE-2017-17745 - CVSS 5.4 (medium), 2017-12-20: Cross-site scripting (XSS) vulnerability in system_name_set.cgi in TP-Link TL-SG108E 1.0.0 allows authenticated remote attackers to submit arbitrary java…
- CVE-2017-17747 - CVSS 6.5 (medium), 2017-12-20: Weak access controls in the Device Logout functionality on the TP-Link TL-SG108E v1.0.0 allow remote attackers to call the logout functionality, triggering a…
- CVE-2017-17746 - CVSS 6.8 (medium), 2017-12-20: Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without…
- CVE-2017-8075 - CVSS 9.8 (critical), 2017-04-23: On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords are in cleartext. This affects the…
- CVE-2017-8078 - CVSS 5.3 (medium), 2017-04-23: On the TP-Link TL-SG108E 1.0, the upgrade process can be requested remotely without authentication (httpupg.cgi with a parameter called cmd). This affects the…
- CVE-2017-8074 - CVSS 9.8 (critical), 2017-04-23: On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log lines where passwords are encoded in hexadecimal. This affects…
- CVE-2017-8077 - CVSS 7.5 (high), 2017-04-23: On the TP-Link TL-SG108E 1.0, there is a hard-coded ciphering key (a long string beginning with Ei2HNryt). This affects the 1.1.2 Build 20141017 Rel.50749…
- CVE-2017-8076 - CVSS 9.8 (critical), 2017-04-23: On the TP-Link TL-SG108E 1.0, admin network communications are RC4 encoded, even though RC4 is deprecated. This affects the 1.1.2 Build 20141017 Rel.50749…
