PT-2025-4023 · Tp Link · Tp-Link Tl-Sg108E

Error404 + 1 · Published 2025-01-27 · Updated 2025-01-27 · CVE-2025-0729

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions TP-Link TL-SG108E version 1.0.0 Build 20201208 Rel. 40304

Description A vulnerability was found in the TP-Link TL-SG108E, which has been rated as problematic. This issue affects some unknown processing and leads to clickjacking. The attack may be initiated remotely.

Recommendations To address this issue, it is recommended to upgrade to version 1.0.0 Build 20250124 Rel. 54920(Beta). Upgrading the affected component is the suggested course of action to resolve the vulnerability.

Exploit

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

BDU:2025-02597

CVE-2025-0729

Affected Products

Tp-Link Tl-Sg108E

References · 11

• 🔥 https://github.com/TheCyberDiver/Public-Disclosures-CVE-/blob/main/tp-link%20clickjacking.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-0729 · Security Note
• https://static.tp-link.com/upload/beta/2025/202501/20250124/TL-SG108E(UN)%206.0_1.0.0%20Build%2020250124%20Rel.54920(Beta)_up.zip · Patch
• https://bdu.fstec.ru/vul/2025-02597 · Security Note
• https://twitter.com/WolfgangSesin/status/1883827575631315186 · Twitter Post
• https://twitter.com/CVEnew/status/1883926123182006769 · Twitter Post
• https://vuldb.com/?ctiid.293507 · Note
• https://tp-link.com · Note
• https://vuldb.com/?submit.478451 · Note
• https://twitter.com/WolfgangSesin/status/1883827574322639278 · Twitter Post
• https://vuldb.com/?id.293507 · Note