Vulnerability Description
TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the product's settings may be altered with the privilege of the administrator.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Tl-Sg105Pe Firmware | 1.0.0 |
| Tp-Link | Tl-Sg105Pe | 1.0 |
Related Weaknesses (CWE)
References
- https://jvn.jp/en/jp/JVN78481846/index.htmlThird Party Advisory
- https://www.tp-link.com/en/business-networking/easy-smart-switch/tl-sg105pe/ProductVendor Advisory
- https://www.tp-link.com/jp/support/download/tl-sg105pe/v1/#FirmwareProductVendor Advisory
- https://jvn.jp/en/jp/JVN78481846/index.htmlThird Party Advisory
- https://www.tp-link.com/en/business-networking/easy-smart-switch/tl-sg105pe/ProductVendor Advisory
- https://www.tp-link.com/jp/support/download/tl-sg105pe/v1/#FirmwareProductVendor Advisory
FAQ
What is CVE-2023-22303?
CVE-2023-22303 is a vulnerability with a CVSS score of 9.8 (CRITICAL). TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator ...
How severe is CVE-2023-22303?
CVE-2023-22303 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2023-22303?
Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Tl-Sg105Pe Firmware, Tp-Link Tl-Sg105Pe.