Notification Access Vulnerability in TP-Link Smart Devices

CVE-2025-4975

What is CVE-2025-4975?

A security concern has been identified in TP-Link smart devices, where users can unintentionally grant full access to power settings when interacting with low battery notifications on shared devices. This vulnerability raises significant concerns about the security of shared user configurations and the potential for unauthorized manipulation of device functionalities.

References