Medium · 6.3 CVE-2024-46548 EUVD-2024-41870GHSA-hg56-xvvv-cj4c

TP-Link Tapo P125M and Kasa KP125M v1.0.3 was discovered to improperly validate certificates, allowing attackers to eavesdrop on communicat…

Published Sep 30, 2024 · Updated Sep 30, 2024 · Assigned by mitre

Description

TP-Link Tapo P125M and Kasa KP125M v1.0.3 was discovered to improperly validate certificates, allowing attackers to eavesdrop on communications and access sensitive information via a man-in-the-middle attack.

References

https://github.com/Chapoly1305/tp-link-cve/blob/main/CVE-2024-46548.md