Skip to content
OpenAdvisories

Product · TP-Link Systems

Kasa EC71 V4

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-102370

    Physical UART Access Leading to an Unauthenticated Root Shell in TP-Link Kasa EC70 and EC71

    Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader.  Although the debug traces are physically severed during manufacturing, an attacker with physical access can restore…

    TP-Link Systems Kasa EC70 V4 Kasa EC71 V4 Network devices
  • Medium 5.3
    CVE-2026-13230

    Information Disclosure Vulnerability in Local Discovery Response in TP-Link Kasa EC70 and EC71

    An information disclosure vulnerability was identified in TP-Link Kasa EC70 v4 and EC71 v4 in the local discovery mechanism, which exposes sensitive geolocation information without requiring authentication. This issue allows an attacker on the same local netw…

    TP-Link Systems Kasa EC71 V4 Kasa EC70 V4 Network devices