Security Advisory

CVE-2017-8078

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-04-23 16:00:00
Last updated 2024-08-05 16:27:22
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

On the TP-Link TL-SG108E 1.0, the upgrade process can be requested remotely without authentication (httpupg.cgi with a parameter called cmd). This affects the 1.1.2 Build 20141017 Rel.50749 firmware.