TP-Link Tl-SG2008 Firmware vulnerabilities

2 CVEs affecting TP-Link Tl-SG2008 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-31659, published 2021-06-10.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-31658, published 2021-06-10. High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days. TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index error. The interface that provides the "device description" function only judges the length of the…
• CVE-2021-31659, published 2021-06-10. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery (CSRF). All configuration information is placed in the URL, without any additional token…