Vulnerabilities (CVE)

Filtered by vendor Tp-link Subscribe
Filtered by product Tapo
Total 6 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-38909 1 Tp-link 3 Tapo, Tapo L530e, Tapo L530e Firmware 2024-01-19 N/A 6.5 MEDIUM
An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the IV component in the AES128-CBC function.
CVE-2023-38908 1 Tp-link 3 Tapo, Tapo L530e, Tapo L530e Firmware 2024-01-19 N/A 6.5 MEDIUM
An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the TSKEP authentication function.
CVE-2023-38907 1 Tp-link 3 Tapo, Tapo L530e, Tapo L530e Firmware 2024-01-19 N/A 7.5 HIGH
An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via session key in the message function.
CVE-2023-38906 1 Tp-link 3 Tapo, Tapo L530e, Tapo L530e Firmware 2024-01-19 N/A 6.5 MEDIUM
An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message.
CVE-2023-27098 1 Tp-link 2 Tapo, Tapo C200 2024-01-12 N/A 7.5 HIGH
TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel.
CVE-2023-34829 1 Tp-link 1 Tapo 2024-01-05 N/A 6.5 MEDIUM
Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user credentials in plaintext.