Skip to content
OpenAdvisories
High · 8.7 CVE-2025-8627 EUVD-2025-28803GHSA-mjmv-2pj5-x57j

Unauthenticated Protocol Commands on TP-Link KP303

Published Aug 25, 2025 · Updated Aug 26, 2025 · Assigned by TPLink

Description

The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak.

This issue affects TP-Link KP303 (US) Smartplug: before 1.1.0.

Affected products

VendorProductAffectedFixed
TP-Link Systems TP-Link KP303 (US) Smartplug < 1.1.0 1.1.0

References