Access Control Vulnerability in TP-Link Tapo Smart Home Devices
CVE-2023-34829

6.5MEDIUM

Key Information:

Vendor
Tp-link
Status
Tapo
Vendor
CVE Published:
28 December 2023

Summary

A vulnerability in TP-Link Tapo smart home devices prior to firmware version 3.1.315 allows unauthorized access to user credentials in plaintext. Attackers may exploit this weakness to compromise sensitive information, putting users at risk of unauthorized control over their smart devices. It is essential for users to update their firmware to mitigate this security risk and safeguard their personal data.

References

https://github.com/SecureScripts/TP-Link_Tapo_Hack

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.