CVE-2021-31659

8.8 highEPSS 0.6%

High (8.8) in tp-link. EPSS 0.6% chance of exploitation in the next 30 days.

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery (CSRF). All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the password of the switch to be modified and the configuration file to be tampered with.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2021-06-10
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

tp-link:tl-sg2005_firmware
tp-link:tl-sg2008_firmware

References

https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-31659
https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-31659

Check your stack JSON