CVE Catalog
CVE-2017-8075
CriticalSummary
On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from 'Switch Info' log lines where passwords are in cleartext. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.
Risk Assessment
The risk to the organization involves the potential for user account takeover or access to sensitive data, which could lead to further attacks or security breaches.
Recommendation
It is recommended to update the firmware to the latest version to mitigate this vulnerability and secure logs against unauthorized access.
Original NVD description (English source)
On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords are in cleartext. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.