Remote Information Disclosure in TPLink Smart Bulbs and Cameras
CVE-2023-38906

6.5MEDIUM

Key Information:

Vendor

Tp-link
Status
Tapo
Tapo L530e Firmware
Vendor
CVE Published:
22 August 2023

What is CVE-2023-38906?

A vulnerability exists in certain TP-Link Smart Bulb and Camera models that allows a remote attacker to gain access to sensitive information by exploiting weaknesses in the handling of UDP authentication codes. This could lead to unauthorized access to user data and pose significant privacy risks.

References

https://www.scitepress.org/PublicationsDetail.aspx?ID=X/a...
https://arxiv.org/abs/2308.09019
https://www.scitepress.org/Papers/2023/120929/120929.pdf

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.