TP-Link TL-SG108E CVE-2017-8075 Information Disclosure Vulnerability

Bugtraq ID:	97983
Class:	Design Error
CVE:	CVE-2017-8075
Remote:	Yes
Local:	No
Published:	Apr 23 2017 12:00AM
Updated:	May 02 2017 02:09AM
Credit:	chmod750
Vulnerable:	TP-LINK TL-SG108E 1.1.2 Build 20141017
Not Vulnerable:

TP-Link TL-SG108E CVE-2017-8075 Information Disclosure Vulnerability

TP-Link TL-SG108E is prone to an information disclosure vulnerability.

Attackers can exploit this issue to obtain the credentials. Information harvested may aid in further attacks.

TP-Link TL-SG108E 1.1.2 Build 20141017 Rel.50749 firmware is vulnerable; other versions may also be affected.

TP-Link TL-SG108E CVE-2017-8075 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TP-Link TL-SG108E CVE-2017-8075 Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

TP-Link TL-SG108E CVE-2017-8075 Information Disclosure Vulnerability

References:

• 8-Port Gigabit Easy Smart Switch TL-SG108E (TP-Link)
  
• Vulnerability disclosure TP-Link multiples CVEs (chmod750)