{"id":"CVE-2023-22303","aliases":["EUVD-2023-26466","GHSA-w8m5-v6rc-xwx3"],"status":"published","title":"TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an...","description":"TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the product's settings may be altered with the privilege of the administrator.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00971,"percentile":0.62202,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2023-01-17T00:00:00Z","modified":"2026-06-17T05:34:59Z","products":[{"vendor":"tp-link","product":"tl-sg105pe_firmware"},{"vendor":"tp-link","product":"tp-link sg105pe"}],"references":[{"url":"https://www.tp-link.com/jp/support/download/tl-sg105pe/v1/#Firmware","tags":["x_transferred","Product","Vendor Advisory"]},{"url":"https://www.tp-link.com/en/business-networking/easy-smart-switch/tl-sg105pe/","tags":["x_transferred","Product","Vendor Advisory"]},{"url":"https://jvn.jp/en/jp/JVN78481846/index.html","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22303"},{"url":"https://www.tp-link.com/en/business-networking/easy-smart-switch/tl-sg105pe"},{"url":"https://github.com/advisories/GHSA-w8m5-v6rc-xwx3"}],"sources":{"cve":[{"id":"CVE-2023-22303","description":"TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the product's settings may be altered with the privilege of the administrator.","status":"published","published":"2023-01-17T00:00:00Z","modified":"2025-04-04T17:53:04.056Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:35:15.779187Z"}],"euvd":[{"id":"EUVD-2023-26466","description":"TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the product's settings may be altered with the privilege of the administrator.","status":"published","published":"2023-01-17T00:00:00Z","modified":"2025-04-04T17:53:04Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:52:42.420681Z"}],"ghsa":[{"id":"GHSA-w8m5-v6rc-xwx3","title":"TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an...","description":"TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the product's settings may be altered with the privilege of the administrator.","status":"published","published":"2023-01-17T12:30:33Z","modified":"2025-04-04T18:31:31Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:00:48.912758Z"}],"nvd":[{"id":"CVE-2023-22303","description":"TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the product's settings may be altered with the privilege of the administrator.","status":"published","published":"2023-01-17T10:15:11.713Z","modified":"2026-06-17T05:34:59.903Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:07:45.305824Z"}]}}