CVE-2025-0729CWE-451

TP-Link TL-SG108E clickjacking

Medium · published January 27, 2025

CVSS v4.0

6.9

EPSS

Percentile

35.3

In the wild

Unconfirmed

What it is

A vulnerability was found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to clickjacking. The attack may be initiated remotely. Upgrading to version 1.0.0 Build 20250124 Rel. 54920(Beta) is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early. They reacted very professional and provided a pre-fix version for their customers.

The record

Technical detail

CVSS v4.0: 6.9 · MEDIUM
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS: 0.00421 · 35.3th percentile
Weakness: CWE-451 · User Interface (UI) Misrepresentation of Critical Information
Published: 2025-01-27T17:00Z

EPSS history

Timeline

27 JAN 17:00Z
TP-Link TL-SG108E clickjacking
cvelistv5