CVE-2021-31659
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
CSRF vulnerability in TP-Link TL-SG2005, TL-SG2008, etc. switches with firmware version 1.0.0 Build 20180529 Rel.40524. All configuration data is placed in the URL without any additional token authentication, allowing an attacker to use a malicious link to change the password and tamper with the configuration file.
Risk Assessment
The risk involves potential takeover of the switch by an attacker, leading to unauthorized network configuration changes, data integrity compromise, and possible access to sensitive information.
Recommendation
Immediately update the TP-Link switch firmware to the latest available version that fixes the CSRF vulnerability. If an update is not possible, restrict administrative interface access to trusted IP addresses only and implement additional authentication mechanisms.
Other vulnerabilities in TP-Link TL-SG2005/TL-SG2008
Original NVD description (English source)
TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery (CSRF). All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the password of the switch to be modified and the configuration file to be tampered with.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS