CVE-2017-17746

CVE-2017-17746 describes a weak access control vulnerability in the TP-Link TL-SG108E 1.0.0 switch. This flaw allows any user on a NAT network to gain unauthorized access to the device if an administrator has previously authenticated from that same NAT network, as the authentication record is tied to the NAT gateway's IP. With a CVSS score of 6.8 (MEDIUM), this vulnerability has a high impact on confidentiality, integrity, and availability, requiring high privileges but low attack complexity and local network access. The EPSS score is very low, indicating a minimal likelihood of exploitation. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. It is not listed in the CISA KEV catalog.