CVE-2025-0729 - CVE House
Back to Database
Status published Medium CVE-2025-0729

TP-Link TL-SG108E clickjacking

Vulnerability Description

A vulnerability was found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to clickjacking. The attack may be initiated remotely. Upgrading to version 1.0.0 Build 20250124 Rel. 54920(Beta) is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early. They reacted very professional and provided a pre-fix version for their customers.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0729

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • error404unknown (VulDB User)

References

More from TP-Link

View All →
CVE-2025-40634
Stack-based buffer overflow in TP-Link Archer AX50
Critical 9.2
CVE-2025-3442
Information Disclosure Vulnerability in TP-Link Tapo IoT Smart Hub
Medium 4.4
CVE-2025-1099
Information Disclosure Vulnerability in TP-Link Tapo C500 Wi-Fi Camera
High 7
CVE-2025-0730
TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings
Medium 6.3
CVE-2024-5244
TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability
Medium 5

Affected Vendor

Affected Software

TL-SG108E
Vulnerable Versions:
1.0.0 Build 20201208 Rel. 40304

Timeline

Official Publish: January 27th, 2025
Last Modified: January 27th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weaknesses (CWE)

CWE-451

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.