CVEvulnerability

CVE-2021-31658

8.1 HIGH Published 2021-06-10 Modified 2026-07-09 Official page ↗
Status
Modified
Published
2021-06-10
Last modified
2026-07-09
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
Weaknesses
CWE-129

Description

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index error. The interface that provides the "device description" function only judges the length of the received data, and does not filter special characters. This vulnerability will cause the application to crash, and all device configuration information will be erased.

Affected configurations

• tp-link tl-sg2005 firmware 1.0.0 • tp-link tl-sg2008 firmware 1.0.0

Related

Weakness · CWE (1)

  • CWE-129 Improper Validation of Array Index weakness

References