CVE-2021-31659

TP-Link TL-SG2005, TL-SG2008, etc

published June 10, 2021

CVSS
—
EPSS
1%
Percentile
45.8
In the wild
Unconfirmed
What it is

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery (CSRF). All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the password of the switch to be modified and the configuration file to be tampered with.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00559 · 45.8th percentile
Published
2021-06-10T14:27Z
EPSS history
Timeline
  • 10 JUN 14:27Z
    TP-Link TL-SG2005, TL-SG2008, etc
    cvelistv5