Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:tl-sg108e_firmware:1.1.2:*:*:*:*:*:*:*

part: o version: 1.1.2 update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductTl Sg108E Firmware (b10a9f7a-17b9-54f6-9cda-3efddf153909)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-8078 vulnerable 2026-06-08 05:10:07.162047 Details available
On the TP-Link TL-SG108E 1.0, the upgrade process can be requested remotely without authentication (httpupg.cgi with a parameter called cmd). This affects the 1.1.2 Build 20141017 Rel.50749 firmware.
Published: 2017-04-23T16:00:00.000Z
Updated: 2024-08-05T16:27:22.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8077 vulnerable 2026-06-08 05:10:07.161718 Details available
On the TP-Link TL-SG108E 1.0, there is a hard-coded ciphering key (a long string beginning with Ei2HNryt). This affects the 1.1.2 Build 20141017 Rel.50749 firmware.
Published: 2017-04-23T16:00:00.000Z
Updated: 2024-09-16T21:07:20.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8076 vulnerable 2026-06-08 05:10:07.161408 Details available
On the TP-Link TL-SG108E 1.0, admin network communications are RC4 encoded, even though RC4 is deprecated. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.
Published: 2017-04-23T16:00:00.000Z
Updated: 2024-09-16T20:53:28.221Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8075 vulnerable 2026-06-08 05:10:07.160945 Details available
On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords are in cleartext. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.
Published: 2017-04-23T16:00:00.000Z
Updated: 2024-08-05T16:27:22.643Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8074 vulnerable 2026-06-08 05:10:07.159715 Details available
On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log lines where passwords are encoded in hexadecimal. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.
Published: 2017-04-23T16:00:00.000Z
Updated: 2024-08-05T16:27:22.702Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.