CVE-2023-28368

5.7 mediumEPSS 0.3%

Medium (5.7) in tp-link t2600g-28sq firmware. EPSS 0.3% chance of exploitation in the next 30 days.

TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential information for the affected device may be obtained.

Severity

CVSS 3.1

5.7 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-1391
Published: 2023-04-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tp-link:t2600g-28sq_firmware

References

https://jvn.jp/en/jp/JVN62420378/
https://www.tp-link.com/en/support/download/t2600g-28sq/#Firmware
https://jvn.jp/en/jp/JVN62420378/
https://www.tp-link.com/en/support/download/t2600g-28sq/#Firmware

Check your stack JSON