CVE-2020-15054

2020-08-0721:14:13

mitre

www.cve.org

tp-link

usb network server

tl-ps310u

privilege escalation

administrative password

sniffing

udp traffic

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

31.1%

JSON

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.

References

research.hisolutions.com/2020/05/critical-vulnerabilites-in-multiple-usb-network-servers/