CVE-2017-8077

On the TP-Link TL-SG108E 1.0, there is a hard-coded ciphering key (a long string beginning with Ei2HNryt). This affects the 1.1.2 Build 20141017 Rel.50749 firmware.
References
Link Resource
https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/ Exploit Technical Description Third Party Advisory
https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/ Exploit Technical Description Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tp-link:tl-sg108e_firmware:1.1.2:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tl-sg108e:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:33

Type Values Removed Values Added
References () https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/ - Exploit, Technical Description, Third Party Advisory () https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/ - Exploit, Technical Description, Third Party Advisory

Information

Published : 2017-04-23 16:59

Updated : 2024-11-21 03:33


NVD link : CVE-2017-8077

Mitre link : CVE-2017-8077

CVE.ORG link : CVE-2017-8077


JSON object : View

Products Affected

tp-link

  • tl-sg108e
  • tl-sg108e_firmware
CWE
CWE-798

Use of Hard-coded Credentials