TP-Link TL-SG108E CVE-2017-8078 Security Bypass Vulnerability

Bugtraq ID:	97985
Class:	Design Error
CVE:	CVE-2017-8078
Remote:	Yes
Local:	No
Published:	Apr 23 2017 12:00AM
Updated:	May 02 2017 01:09AM
Credit:	chmod750
Vulnerable:	TP-LINK TL-SG108E 1.1.2 Build 20141017
Not Vulnerable:

TP-Link TL-SG108E CVE-2017-8078 Security Bypass Vulnerability

TP-Link TL-SG108E is prone to a security-bypass vulnerability.

An attacker may leverage this issue to bypass certain security restrictions and perform unauthorized actions like unauthenticated remote upgrades.

TP-Link TL-SG108E 1.1.2 Build 20141017 Rel.50749 firmware is vulnerable; other versions may also be affected.

TP-Link TL-SG108E CVE-2017-8078 Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TP-Link TL-SG108E CVE-2017-8078 Security Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

TP-Link TL-SG108E CVE-2017-8078 Security Bypass Vulnerability

References:

• 8-Port Gigabit Easy Smart Switch TL-SG108E (TP-Link)
  
• Vulnerability disclosure TP-Link multiples CVEs (chmod750)