Privilege Escalation Vulnerability in TP-Link USB Network Server
CVE-2020-15054

8.8HIGH

Key Information:

Vendor
Tp-link
Vendor
CVE Published:
7 August 2020

Summary

The TP-Link USB Network Server TL-PS310U devices prior to version 2.079.000.t0210 are susceptible to a privilege escalation vulnerability. An attacker on the same network can exploit this weakness by intercepting unencrypted UDP traffic, which allows them to uncover the administrative password. This flaw underscores the importance of secure communication protocols to protect sensitive authentication information.

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.