TP-LINK TL-SG108E 1.0.0 NAT access control

Summaryinfo

A vulnerability was found in TP-LINK TL-SG108E 1.0.0. It has been declared as critical. This issue affects some unknown processing of the component NAT. The manipulation results in access control. This vulnerability was named CVE-2017-17746. The attack needs to be approached within the local network. There is no available exploit.

Detailsinfo

A vulnerability, which was classified as critical, was found in TP-LINK TL-SG108E 1.0.0 (Router Operating System). Affected is some unknown processing of the component NAT. The manipulation with an unknown input leads to a access control vulnerability. CWE is classifying the issue as CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without entering user credentials. The authentication record is stored on the device; thus if an administrator authenticates from a NAT network, the authentication applies to the IP address of the NAT gateway, and any user behind that NAT gateway is also treated as authenticated.

The bug was discovered 12/19/2017. The weakness was presented 12/20/2017 as not defined mailinglist post (Full-Disclosure). The advisory is shared for download at seclists.org. This vulnerability is traded as CVE-2017-17746 since 12/18/2017. Access to the local network is required for this attack to succeed. Required for exploitation is a authentication. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1068.

The vulnerability was handled as a non-public zero-day exploit for at least 1 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See VDB-110927 and VDB-110929 for similar entries. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Router Operating System

Vendor

• TP-LINK

Name

• TL-SG108E

Version

• 1.0.0

License

• commercial

Website

• Vendor: https://www.tp-link.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion