SSH Host Key Vulnerability in TP-Link T2600G-28SQ Switch

CVE-2023-28368

What is CVE-2023-28368?

The TP-Link T2600G-28SQ switch is susceptible to an SSH host key vulnerability due to the use of insecure keys in firmware versions prior to T2600G-28SQ(UN)_V1_1.0.6 Build 20230227. This flaw allows an attacker to create a fraudulent device that mimics the legitimate switch by leveraging the vulnerable host key. If a network administrator unknowingly logs into this deceiving device, their credentials could be compromised, offering the attacker potential access to sensitive network configurations and data.

References