Vulnerability in TP-Link T2600g-28sq
CVE-2023-28368
TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential information for the affected device may be obtained.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.003 (16.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 17th percentile — 16.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- TP-Link T2600g-28sq — versions 1.0
- TP-Link T2600g-28sq Firmware — versions 20190530, 20200304
- TP-Link Corporation Limited T2600g-28sq — versions firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227'
Weakness classification (CWE)
References
- www.tp-link.com/en/support/download/t2600g-28sq/ (Product)
- jvn.jp/en/jp/JVN62420378/ (Third Party Advisory)
Frequently asked questions
- What is CVE-2023-28368?
- CVE-2023-28368 is a medium-severity vulnerability in TP-Link T2600g-28sq, classified under CWE-1391. CVSS score: 5.7/10. Published 2023-04-11.
- How severe is CVE-2023-28368?
- Medium severity. CVSS v3 base score is 5.7 out of 10.