PT-2017-18104

CVE-2017-8076

·

Publicado

2017-04-23

·

Atualizado

2017-04-27

Descrição por

CVSS 3.1
9.8
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TP-Link TL-SG108E version 1.0
Description The issue concerns the use of RC4 encoding for admin network communications, despite RC4 being deprecated. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.
Recommendations For TP-Link TL-SG108E version 1.0, consider updating the firmware to a version that does not use RC4 encoding for admin network communications. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-326: Inadequate Encryption Strength
Identificadores relacionados
CVE-2017-8076
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com