CVE-2025-0729: TP-Link TL-SG108E clickjacking
First published: Mon Jan 27 2025(Updated: )
A vulnerability was found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to clickjacking. The attack may be initiated remotely. Upgrading to version 1.0.0 Build 20250124 Rel. 54920(Beta) is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early. They reacted very professional and provided a pre-fix version for their customers.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TP-Link TL-SG108E Firmware | =1.0.0 Build 20201208 Rel. 40304 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.293507
- https://vuldb.com/?ctiid.293507
- https://vuldb.com/?submit.478451
- https://github.com/TheCyberDiver/Public-Disclosures-CVE-/blob/main/tp-link%20clickjacking.md
- https://static.tp-link.com/upload/beta/2025/202501/20250124/TL-SG108E(UN)%206.0_1.0.0%20Build%2020250124%20Rel.54920(Beta)_up.zip
- https://www.tp-link.com/
Frequently Asked Questions
What is the severity of CVE-2025-0729?
CVE-2025-0729 has been rated as problematic.
What devices are affected by CVE-2025-0729?
CVE-2025-0729 affects TP-Link TL-SG108E version 1.0.0 Build 20201208 Rel. 40304.
How do I fix CVE-2025-0729?
To fix CVE-2025-0729, upgrade to TP-Link TL-SG108E version 1.0.0 Build 20250124 Rel. 5.
What type of vulnerability is CVE-2025-0729?
CVE-2025-0729 is a clickjacking vulnerability that can be exploited remotely.
Can CVE-2025-0729 be exploited remotely?
Yes, the CVE-2025-0729 vulnerability may be initiated remotely.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/severity
- agent/source
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/tp-link
- canonical/tp-link tl-sg108e firmware