CVE-2025-0729
TP-Link TL-SG108E clickjacking
- State
- Published
- Severity
- 6.9 Medium
- Published
- Jan 27, 2025
- Updated
- Jan 27, 2025
- Reserved
- Jan 27, 2025
Description
A vulnerability was found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to clickjacking. The attack may be initiated remotely. Upgrading to version 1.0.0 Build 20250124 Rel. 54920(Beta) is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early. They reacted very professional and provided a pre-fix version for their customers.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 3.0 | 4.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 2.0 | 5.0 Medium | AV:N/AC:L/Au:N/C:N/I:P/A:N | VulDB |
Weaknesses
- CWE-451 Clickjacking
Affected Products
| Product | Versions |
|---|---|
TL-SG108ETP-Link |
|
References
- VDB-293507 | TP-Link TL-SG108E clickjackingvdb-entry
- VDB-293507 | CTI Indicators (IOB, IOC, TTP)signaturepermissions-required
- Submit #478451 | tp-link TL-SG108E 1.0.0 Build 20201208 Rel.40304 Clickjackingthird-party-advisory
- https://github.com/TheCyberDiver/Public-Disclosures-CVE-/blob/main/tp-link%20clickjacking.mdrelated
- https://static.tp-link.com/upload/beta/2025/202501/20250124/TL-SG108E(UN)%206.0_1.0.0%20Build%2020250124%20Rel.54920(Beta)_up.zippatch
- https://www.tp-link.com/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.