PT-2017-18104 · Tp Link · Tp-Link Tl-Sg108E

Published 2017-04-23 · Updated 2017-04-27 · CVE-2017-8076

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link TL-SG108E version 1.0

Description The issue concerns the use of RC4 encoding for admin network communications, despite RC4 being deprecated. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.

Recommendations For TP-Link TL-SG108E version 1.0, consider updating the firmware to a version that does not use RC4 encoding for admin network communications. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2017-8076

Affected Products

Tp-Link Tl-Sg108E

References · 3

• 🔥 https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-8076 · Security Note
• https://osv.dev/vulnerability/CVE-2017-8076 · Vendor Advisory