Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT…
Priority LOW 34CWE-306Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-306.
Summary
Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without entering user credentials. The authentication record is stored on the device; thus if an administrator authenticates from a NAT network, the authentication applies to the IP address of the NAT gateway, and any user behind that NAT gateway is also treated as authenticated.
Why it matters now
EPSS 0.02039 81st percentileScored 2026-11-08
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:tp-link:tl-sg108e_firmware:1.0.0:*:*:*:*:*:*:* | 1.0.0 | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:tl-sg108e:1.0:*:*:*:*:*:*:* | 1.0 | Running on | TP-Link |
| cpe:2.3:h:tp-link:tl-sg108e:2.0:*:*:*:*:*:*:* | 2.0 | Running on | TP-Link |
| cpe:2.3:h:tp-link:tl-sg108e:3.0:*:*:*:*:*:*:* | 3.0 | Running on | TP-Link |
- cpe:2.3:o:tp-link:tl-sg108e_firmware:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:tl-sg108e:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link
- cpe:2.3:h:tp-link:tl-sg108e:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·TP-Link
- cpe:2.3:h:tp-link:tl-sg108e:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·TP-Link
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-17746
- 2026-10-03 Alias added: GHSA-4f3r-2vxp-mj25
References
More TP-Link Tl-sg108e Firmware vulnerabilities
- TI-2017-05665 On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch… CVSS 3.0CRITICAL 9.8
- TI-2017-05664 On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND… CVSS 3.0CRITICAL 9.8
- TI-2017-05666 On the TP-Link TL-SG108E 1.0, admin network communications are RC4 encoded, even though… CVSS 3.0CRITICAL 9.8
- TI-2017-05667 On the TP-Link TL-SG108E 1.0, there is a hard-coded ciphering key (a long string… CVSS 3.0HIGH 7.5
- TI-2017-12992 Weak access controls in the Device Logout functionality on the TP-Link TL-SG108E v1.0.0… CVSS 3.0MEDIUM 6.5
- TI-2025-00621 TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings CVSS 4.0MEDIUM 6.3
Sources
- CVE-2017-17746 · CVE Program
- CVE-2017-17746 · NVD
- FIRST EPSS
- GHSA-4f3r-2vxp-mj25 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences