CVE-2021-31659

Katalog CVE

CVSS 8.8 · High EPSS 0,56%

Kerentanan Cross-Site Request Forgery (CSRF) pada tp-link tl-sg2005 firmware, tp-link tl-sg2008 firmware. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery (CSRF). All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the password of the switch to be modified and the configuration file to be tampered with.

Rincian

Terbit di NVD

10 Juni 2021

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-352: Cross-Site Request Forgery (CSRF)

EPSS (30 hari)

0,56% peluang dieksploitasi; lebih tinggi dari 45,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-31659 exploit · advisory pihak ketiga