CVE-2023-43318

2024-03-0500:00:00

mitre

github.com

cve-2023-43318

tp-link

jetstream smart switch

privilege escalation

get requests

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

41.4%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

TP-Link JetStream Smart Switch TL-SG2210P 5.0 Build 20211201 allows attackers to escalate privileges via modification of the ‘tid’ and ‘usrlvl’ values in GET requests.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:tp-link:tl-sg2210p:-:*:*:*:*:*:*:*"
    ],
    "vendor": "tp-link",
    "product": "tl-sg2210p",
    "versions": [
      {
        "status": "affected",
        "version": "v5.0 Build 20211201"
      }
    ],
    "defaultStatus": "unknown"
  }
]