CVE-2017-8078

MEDIUM · CVSS 5.3 EPSS 1.86%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-04-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2017-8078

Severity

MEDIUM

CVSS

5.3

EPSS

1.86%

Original NVD Description

On the TP-Link TL-SG108E 1.0, the upgrade process can be requested remotely without authentication (httpupg.cgi with a parameter called cmd). This affects the 1.1.2 Build 20141017 Rel.50749 firmware.