tplink records
2 published records for vendor tplink.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-269 Improper Privilege Management1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2024-46549No exploit | An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connections by impersonatingCWE-269 | High7.6 | — | 0.3% | Sep 30, 2024 |
25Monitor | CVE-2024-46548No exploit | TP-Link Tapo P125M and Kasa KP125M v1.0.3 was discovered to improperly validate certificates, allowing attackers to eavesdrop on communicatiCWE-200 | Medium6.3 | — | 0.1% | Sep 30, 2024 |
- CVE-2024-4654930Monitor
An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connections by impersonating
HighCVSS 7.6No exploitEPSS 0%Sep 30, 2024
- CVE-2024-4654825Monitor
TP-Link Tapo P125M and Kasa KP125M v1.0.3 was discovered to improperly validate certificates, allowing attackers to eavesdrop on communicati
MediumCVSS 6.3No exploitEPSS 0%Sep 30, 2024