Heimdall Security Logo

CVE-2026-1668

Vulnérabilité élevée dans SG2008P 3.2x (TP-Link Systems Inc.)

CVSS 7.7 · Élevée
EPSS 1.0%
TP-Link Systems Inc.•SG2008P 3.2x•Versions : <3.0.21 Build 20260121 Rel.53314, <1.30.1 Build 20260129 Rel.8831, <2.40.1 Build 20260127 Rel.39545, <1.20.18 Build 20260121 Rel.55833, <1.30.17 Build 20260113 Rel.67732, <4.20.17 Build 20260121 Rel.53429, <1.0.19 Build 20260121 Rel.53429, <1.0.13 Build 20260121 Rel.54132, <1.0.12 Build 20260121 Rel.56907, <1.20.18 Build 20260121 Rel.54271, 0, <6.30.1 Build 20260127 Rel.39545, <2.20.2 Build 20260127 Rel.32017, <2.20.20 Build 20260121 Rel.55833, <1.20.16 Build 20260113 Rel.67732, <3.30.1 Build 20260127 Rel.39545, <1.20.1 Build 20260129 Rel.13605, <3.20.21 Build 20260113 Rel.67732, <5.20.1 Build 20260127 Rel.32017, <1.0.11 Build 20260121 Rel.56907, <1.30.1 Build 20260128 Rel.8721, <5.0.15 Build 20260121 Rel.53429, <6.20.20 Build 20260113 Rel.67732, <3.30.1 Build 20260206 Rel.33103, <1.0.15 Build 20260121 Rel.55833, <2.30.1 Build 20260128 Rel.8721, <3.40.1 Build 20260128 Rel.7041, <5.20.20 Build 20260121 Rel.53429, <1.40.1 Build 20260127 Rel.39545, <2.30.16 Build 20260113 Rel.67732, <1.0.15 Build 20260121 Rel.53429, <5.30.1 Build 20260127 Rel.32017, <1.0.16 Build 20260113 Rel.67732, <6.20.18 Build 20260121 Rel.53429, <2.0.14 Build 20260121 Rel.53429, <5.20.18 Build 20260121 Rel.53429, <1.20.19 Build 20260121 Rel.54271, <4.30.1 Build 20260127 Rel.32017, <1.0.19 Build 20260121 Rel.53314, <1.0.15 Build 20260121 Rel.56907, <4.0.26 Build 20260121 Rel.53429, <4.20.18 Build 20260121 Rel.53429, <1.20.16 Build 20260121 Rel.57953, <1.30.1 Build 20260128 Rel.7041, <3.30.17 Build 20260121 Rel.54132, <5.30.16 Build 20260121 Rel.53429, <3.30.1 Build 20260127 Rel.32017, <5.0.25 Build 20260113 Rel.67732, <1.20.1 Build 20260127 Rel.39545, <1.20.17 Build 20260121 Rel.53429, <1.30.1 Build 20260127 Rel.39545, <1.20.17 Build 20260121 Rel.54132, <3.0.22 Build 20260121 Rel.54132, <3.20.17 Build 20260121 Rel.53429, <1.30.1 Build 20260127 Rel.32017

Description

The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.

Gravité et risque d'exploitation

CVE-2026-1668 obtient un score CVSS de 7.7/10, soit une gravité élevée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 1.02 %, ce qui la place devant 62.7 % des CVE référencées.

Que faire ?

  • Vérifiez si SG2008P 3.2x (versions <3.0.21 Build 20260121 Rel.53314, <1.30.1 Build 20260129 Rel.8831, <2.40.1 Build 20260127 Rel.39545, <1.20.18 Build 20260121 Rel.55833, <1.30.17 Build 20260113 Rel.67732, <4.20.17 Build 20260121 Rel.53429, <1.0.19 Build 20260121 Rel.53429, <1.0.13 Build 20260121 Rel.54132, <1.0.12 Build 20260121 Rel.56907, <1.20.18 Build 20260121 Rel.54271, 0, <6.30.1 Build 20260127 Rel.39545, <2.20.2 Build 20260127 Rel.32017, <2.20.20 Build 20260121 Rel.55833, <1.20.16 Build 20260113 Rel.67732, <3.30.1 Build 20260127 Rel.39545, <1.20.1 Build 20260129 Rel.13605, <3.20.21 Build 20260113 Rel.67732, <5.20.1 Build 20260127 Rel.32017, <1.0.11 Build 20260121 Rel.56907, <1.30.1 Build 20260128 Rel.8721, <5.0.15 Build 20260121 Rel.53429, <6.20.20 Build 20260113 Rel.67732, <3.30.1 Build 20260206 Rel.33103, <1.0.15 Build 20260121 Rel.55833, <2.30.1 Build 20260128 Rel.8721, <3.40.1 Build 20260128 Rel.7041, <5.20.20 Build 20260121 Rel.53429, <1.40.1 Build 20260127 Rel.39545, <2.30.16 Build 20260113 Rel.67732, <1.0.15 Build 20260121 Rel.53429, <5.30.1 Build 20260127 Rel.32017, <1.0.16 Build 20260113 Rel.67732, <6.20.18 Build 20260121 Rel.53429, <2.0.14 Build 20260121 Rel.53429, <5.20.18 Build 20260121 Rel.53429, <1.20.19 Build 20260121 Rel.54271, <4.30.1 Build 20260127 Rel.32017, <1.0.19 Build 20260121 Rel.53314, <1.0.15 Build 20260121 Rel.56907, <4.0.26 Build 20260121 Rel.53429, <4.20.18 Build 20260121 Rel.53429, <1.20.16 Build 20260121 Rel.57953, <1.30.1 Build 20260128 Rel.7041, <3.30.17 Build 20260121 Rel.54132, <5.30.16 Build 20260121 Rel.53429, <3.30.1 Build 20260127 Rel.32017, <5.0.25 Build 20260113 Rel.67732, <1.20.1 Build 20260127 Rel.39545, <1.20.17 Build 20260121 Rel.53429, <1.30.1 Build 20260127 Rel.39545, <1.20.17 Build 20260121 Rel.54132, <3.0.22 Build 20260121 Rel.54132, <3.20.17 Build 20260121 Rel.53429, <1.30.1 Build 20260127 Rel.32017) est présent sur votre parc.
  • Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
  • À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
  • Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.

Références

Rechercher une autre CVE