Description
A vulnerability was found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to clickjacking. The attack may be initiated remotely. Upgrading to version 1.0.0 Build 20250124 Rel. 54920(Beta) is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early. They reacted very professional and provided a pre-fix version for their customers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TP-Link | TL-SG108E | 1.0.0 Build 20201208 Rel. 40304 | — |
References
- VDB-293507 | TP-Link TL-SG108E clickjacking vdb-entry
- VDB-293507 | CTI Indicators (IOB, IOC, TTP) signature permissions-required
- Submit #478451 | tp-link TL-SG108E 1.0.0 Build 20201208 Rel.40304 Clickjacking third-party-advisory
- https://github.com/TheCyberDiver/Public-Disclosures-CVE-/blob/main/tp-link%20clickjacking.md related
- https://static.tp-link.com/upload/beta/2025/202501/20250124/TL-SG108E(UN)%206.0_1.0.0%20Build%2020250124%20Rel.54920(Beta)_up.zip patch
- https://www.tp-link.com/ product