SSH Host Key Vulnerability in TP-Link T2600G-28SQ Switch

CVE-2023-28368

What is CVE-2023-28368?

The TP-Link T2600G-28SQ switch is susceptible to an SSH host key vulnerability due to the use of insecure keys in firmware versions prior to T2600G-28SQ(UN)_V1_1.0.6 Build 20230227. This flaw allows an attacker to create a fraudulent device that mimics the legitimate switch by leveraging the vulnerable host key. If a network administrator unknowingly logs into this deceiving device, their credentials could be compromised, offering the attacker potential access to sensitive network configurations and data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References