TP-Link SG105PE firmware prior to TL-SG105PE(UN) 1.0_1.0.0 Build 20221208 contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the products settings may be altered with the privilege of the administrator.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tl-sg105pe_firmware | Tp-link | 1.0.0-build_20221208 (including) | 1.0.0-build_20221208 (including) |