An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message.
References
| Link | Resource |
|---|---|
| https://arxiv.org/abs/2308.09019 | Third Party Advisory |
| https://www.scitepress.org/Papers/2023/120929/120929.pdf | |
| https://www.scitepress.org/PublicationsDetail.aspx?ID=X/auBv7JrSo=&t=1 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
19 Jan 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
25 Aug 2023, 17:51
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:tp-link:tapo_l530e_firmware:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:tp-link:tapo:2.8.14:*:*:*:*:*:*:* cpe:2.3:h:tp-link:tapo_l530e:-:*:*:*:*:*:*:* |
|
| First Time |
Tp-link tapo L530e Firmware
Tp-link tapo Tp-link Tp-link tapo L530e |
|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| References | (MISC) https://www.scitepress.org/PublicationsDetail.aspx?ID=X/auBv7JrSo=&t=1 - Third Party Advisory | |
| References | (MISC) https://arxiv.org/abs/2308.09019 - Third Party Advisory |
22 Aug 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-22 00:15
Updated : 2024-01-19 20:15
NVD link : CVE-2023-38906
Mitre link : CVE-2023-38906
CVE.ORG link : CVE-2023-38906
JSON object : View
Products Affected
tp-link
- tapo_l530e
- tapo_l530e_firmware
- tapo
CWE