CVE-2023-22303

Katalog CVE

CVSS 9.8 · Critical EPSS 0,95%

Kerentanan Improper Authentication pada tp-link tl-sg105pe firmware. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the product's settings may be altered with the privilege of the administrator.

Rincian

Terbit di NVD

17 Januari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

0,95% peluang dieksploitasi; lebih tinggi dari 60,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.tp-link.com/en/business-networking/easy-smart-switch/tl-sg105pe/ product · advisory vendor
• https://www.tp-link.com/jp/support/download/tl-sg105pe/v1/#Firmware product · advisory vendor
• https://jvn.jp/en/jp/JVN78481846/index.html advisory pihak ketiga