VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 10, 2021· Updated Aug 3, 2024

CVE-2021-31659

CVE-2021-31659

Description

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery (CSRF). All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the password of the switch to be modified and the configuration file to be tampered with.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • TP-Link/TL-SG2005, TL-SG2008description
  • TP-Link/TL-SG2005llm-fuzzy
    Range: = 1.0.0 Build 20180529 Rel.40524
  • TP-Link/TL-SG2008llm-fuzzy
    Range: = 1.0.0 Build 20180529 Rel.40524

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.