CVE-2024-4224

Medium

Description

An authenticated stored cross-site scripting (XSS) exists in the TP-Link TL-SG1016DE affecting version TL-SG1016DE(UN) V7.6_1.0.0 Build 20230616, which could allow an adversary to run JavaScript in an administrator's browser. This issue was fixed in TL-SG1016DE(UN) V7_1.0.1 Build 20240628.

SeverityMedium

CVSS5.4

Exploit probability—

Product

TL-SG1016DE

PublishedJul 15, 2024

First seenJul 15, 2024

Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Patches

tp-link.com/en/support/download/tl-sg1016de/v7/#Firmware

Affected products

Product	Affected versions	Fixed in
TP-Link TL-SG1016DE	v ≤ V7.6_1.0.0 Build 20230616	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.