CVE-2023-28368

TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential information for the affected device may be obtained.

CVSS v3 5.7 MEDIUM

5.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.1 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://jvn.jp/en/jp/JVN62420378/	Third Party Advisory
https://www.tp-link.com/en/support/download/t2600g-28sq/#Firmware	Product
https://jvn.jp/en/jp/JVN62420378/	Third Party Advisory
https://www.tp-link.com/en/support/download/t2600g-28sq/#Firmware	Product

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:tp-link:t2600g-28sq_firmware:20190530:::::::*
	cpe:2.3:o:tp-link:t2600g-28sq_firmware:20200304:::::::*

cpe:2.3:h:tp-link:t2600g-28sq:1.0:*:*:*:*:*:*:*

History

10 Feb 2025, 21:15

Type	Values Removed	Values Added
CWE		CWE-1391

Information

Published : 2023-04-11 09:15

Updated : 2025-02-10 21:15

NVD link : CVE-2023-28368

Mitre link : CVE-2023-28368

CVE.ORG link : CVE-2023-28368

JSON object : View

Products Affected

tp-link

t2600g-28sq
t2600g-28sq_firmware

CWE

NVD-CWE-noinfo CWE-1391

Use of Weak Credentials

{"id": "CVE-2023-28368", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.1}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.1}]}, "published": "2023-04-11T09:15:08.247", "references": [{"url": "https://jvn.jp/en/jp/JVN62420378/", "tags": ["Third Party Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "https://www.tp-link.com/en/support/download/t2600g-28sq/#Firmware", "tags": ["Product"], "source": "vultures@jpcert.or.jp"}, {"url": "https://jvn.jp/en/jp/JVN62420378/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.tp-link.com/en/support/download/t2600g-28sq/#Firmware", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-1391"}]}], "descriptions": [{"lang": "en", "value": "TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential information for the affected device may be obtained."}], "lastModified": "2025-02-10T21:15:15.867", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:t2600g-28sq_firmware:20190530:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54026FF9-55C5-4501-B05C-0D6C8C6BC108"}, {"criteria": "cpe:2.3:o:tp-link:t2600g-28sq_firmware:20200304:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D57EA613-F481-46AC-80C4-F851EC1C18CF"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:t2600g-28sq:1.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C69D673B-718C-47FB-AE3F-E503EFE4DBBD"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "vultures@jpcert.or.jp"}